--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2"}
{"level":"error","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2"}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46"}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:54:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"error","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d"}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e"}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:54:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:54:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36068","PortSpecifier":{"PortValue":36068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a8f880f-061a-4391-93ff-bcb208a21571","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36068","PortSpecifier":{"PortValue":36068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259656,"nanos":808158349},"http":{"id":"4a8f880f-061a-4391-93ff-bcb208a21571","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a8f880f-061a-4391-93ff-bcb208a21571","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a923efb1-4c89-4471-843b-cc748fc6d74a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38472","PortSpecifier":{"PortValue":38472}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259656,"nanos":878219579},"http":{"id":"a923efb1-4c89-4471-843b-cc748fc6d74a","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a923efb1-4c89-4471-843b-cc748fc6d74a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36074","PortSpecifier":{"PortValue":36074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","method":"GET","path":"/maas-api/v1/api-keys/20698abd-6478-43b5-aa53-05db4cb966e3","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36074","PortSpecifier":{"PortValue":36074}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259656,"nanos":973653645},"http":{"id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","method":"GET","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20698abd-6478-43b5-aa53-05db4cb966e3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/20698abd-6478-43b5-aa53-05db4cb966e3",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:16Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47e3fc0d-ca13-4c78-b6c0-9cd33316ae63","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","method":"GET","path":"/maas-api/v1/api-keys/4ff56f84-b414-4d6b-b1ab-c8b8a92fbd71","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38476","PortSpecifier":{"PortValue":38476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259657,"nanos":12590892},"http":{"id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","method":"GET","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff56f84-b414-4d6b-b1ab-c8b8a92fbd71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/4ff56f84-b414-4d6b-b1ab-c8b8a92fbd71",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6f0b6567-3d20-4025-81fe-ca4242fb3fa3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b79ab0-b351-466f-8d90-da8458e75568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36632","PortSpecifier":{"PortValue":36632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36b79ab0-b351-466f-8d90-da8458e75568","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36b79ab0-b351-466f-8d90-da8458e75568","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36632","PortSpecifier":{"PortValue":36632}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259674,"nanos":589382289},"http":{"id":"36b79ab0-b351-466f-8d90-da8458e75568","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36b79ab0-b351-466f-8d90-da8458e75568","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36b79ab0-b351-466f-8d90-da8458e75568","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36b79ab0-b351-466f-8d90-da8458e75568","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b79ab0-b351-466f-8d90-da8458e75568","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36b79ab0-b351-466f-8d90-da8458e75568","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58716","PortSpecifier":{"PortValue":58716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58716","PortSpecifier":{"PortValue":58716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259674,"nanos":629153339},"http":{"id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9d729f2-52c0-47a4-a2ba-d61307eb680d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36644","PortSpecifier":{"PortValue":36644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259674,"nanos":666874521},"http":{"id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","method":"GET","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14hJXLYqHp4zXlvzp_xcwHz83IL7OI7B7oJIPt7PlZ4WpRpOS0EsDai0bmmBs"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14hJXLYqHp4zXlvzp_xcwHz83IL7OI7B7oJIPt7PlZ4WpRpOS0EsDai0bmmBs\"}"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"56c57d13-077d-4ec9-958f-13714823ac7c","keyName":"e2e-auth-iso-a-6c449b","subscription":"e2e-auth-iso-a81063","tenant":"e2e-shared-a-6096ec","userId":"56c57d13-077d-4ec9-958f-13714823ac7c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-a81063"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"adbd6774-5d2c-48ab-bd48-4015aca61f82","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049fb53b-9f99-44d3-9315-7242daf60740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"049fb53b-9f99-44d3-9315-7242daf60740","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"049fb53b-9f99-44d3-9315-7242daf60740","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35852","PortSpecifier":{"PortValue":35852}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259691,"nanos":992644540},"http":{"id":"049fb53b-9f99-44d3-9315-7242daf60740","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"049fb53b-9f99-44d3-9315-7242daf60740","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"049fb53b-9f99-44d3-9315-7242daf60740","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"049fb53b-9f99-44d3-9315-7242daf60740","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049fb53b-9f99-44d3-9315-7242daf60740","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"049fb53b-9f99-44d3-9315-7242daf60740","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32946","PortSpecifier":{"PortValue":32946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"60e2c055-02e8-49b8-b5df-136082f1a80c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32946","PortSpecifier":{"PortValue":32946}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259692,"nanos":28012899},"http":{"id":"60e2c055-02e8-49b8-b5df-136082f1a80c","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"60e2c055-02e8-49b8-b5df-136082f1a80c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32954","PortSpecifier":{"PortValue":32954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32954","PortSpecifier":{"PortValue":32954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259692,"nanos":62799781},"http":{"id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","method":"GET","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-16bKl7kOX4ntuD6Pd_ibtCm41q40862CEWHorJRmSDMUTpAS5p4uObxfpzqtu"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-16bKl7kOX4ntuD6Pd_ibtCm41q40862CEWHorJRmSDMUTpAS5p4uObxfpzqtu\"}"}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-05T13:54:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"84aa45a4-6c58-4ed7-b727-70c0f9af459d","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33208","PortSpecifier":{"PortValue":33208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1545d37b-a78a-40ce-ba8f-eece48361710","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33208","PortSpecifier":{"PortValue":33208}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259708,"nanos":42736105},"http":{"id":"1545d37b-a78a-40ce-ba8f-eece48361710","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1545d37b-a78a-40ce-ba8f-eece48361710","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47014","PortSpecifier":{"PortValue":47014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47014","PortSpecifier":{"PortValue":47014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259708,"nanos":73003876},"http":{"id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6736e5f1-aeac-4bb5-aa34-f6f4854dbc51","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33224","PortSpecifier":{"PortValue":33224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33224","PortSpecifier":{"PortValue":33224}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259708,"nanos":106917488},"http":{"id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3d3bb4c2-f5be-48c6-bb73-7f106664be12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47018","PortSpecifier":{"PortValue":47018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"588feadb-a31f-42e0-9354-1f4d4261f69a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47018","PortSpecifier":{"PortValue":47018}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259708,"nanos":142984558},"http":{"id":"588feadb-a31f-42e0-9354-1f4d4261f69a","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:08Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"588feadb-a31f-42e0-9354-1f4d4261f69a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41746","PortSpecifier":{"PortValue":41746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41746","PortSpecifier":{"PortValue":41746}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259725,"nanos":349421321},"http":{"id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ce60e85-be96-4e8e-a34e-28b44b45570e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43178","PortSpecifier":{"PortValue":43178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43178","PortSpecifier":{"PortValue":43178}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259725,"nanos":383167962},"http":{"id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ca32ac29-8cf6-400c-a9d3-48c9a3087b67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43182","PortSpecifier":{"PortValue":43182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","method":"GET","path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43182","PortSpecifier":{"PortValue":43182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259725,"nanos":419556830},"http":{"id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","method":"GET","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"72e3f3a8-86f0-4bb8-a587-b17551ea33a2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41750","PortSpecifier":{"PortValue":41750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","method":"GET","path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41750","PortSpecifier":{"PortValue":41750}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259725,"nanos":450842937},"http":{"id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","method":"GET","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/0ac3ce82-80ae-4482-9f15-b3386cb683ba",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aa15d1cd-2d07-4a37-8379-bb314d462d6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48748","PortSpecifier":{"PortValue":48748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"42ef57f9-95d1-4840-970a-ea289895f83b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48748","PortSpecifier":{"PortValue":48748}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259748,"nanos":999679138},"http":{"id":"42ef57f9-95d1-4840-970a-ea289895f83b","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"42ef57f9-95d1-4840-970a-ea289895f83b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54936","PortSpecifier":{"PortValue":54936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:54936","PortSpecifier":{"PortValue":54936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259749,"nanos":34121304},"http":{"id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/auth-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b57c580-a8ef-4f6b-bfa6-b7b60dba378f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48762","PortSpecifier":{"PortValue":48762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259749,"nanos":72004269},"http":{"id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-gPorWzY4fBmx1vVo_jlQsii5vwCJhFQAmESgsu4CMfVK3loZVP50mvb3Igmi"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-gPorWzY4fBmx1vVo_jlQsii5vwCJhFQAmESgsu4CMfVK3loZVP50mvb3Igmi\"}"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6122d857-4bd8-4375-97fd-93e1406a0ebc","keyName":"e2e-auth-iso-a-d682e2","subscription":"e2e-auth-iso-7479c2","tenant":"e2e-shared-a-6096ec","userId":"6122d857-4bd8-4375-97fd-93e1406a0ebc","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/auth-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7479c2"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:55:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2ad5b7dd-5df2-40a4-8c13-ab269c1951c2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a905eeeec6ab88a2367204788cea6fb00e45a523e81679bf0c1f012891d3bd46"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1a5f221abbd22e9325f39eb4fb838e336ee1ef0ef4b7911aac94e3c4732c1163"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cbaf7a974b7a3ac981cf3ea30b89ccdae9ea4c757ae9fe85be484baa3cc68283"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c40199fadf1d65de476234bfa9e5ae1832950898c49ef1146cdf56faf0d1e6a9"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b159fa61c1fab37606727c9836057647666b0e1943b6caaf05f4c2adcbab11f2"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d4dd9bb7454a1fbfe8b57116675a4dd176100462c525072f65823f73fbfa4922"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34532546cb0813a0ffe788e7f6f5c6a62afbe088760928c081ded2b84eddcdd7"}
{"level":"info","ts":"2026-07-05T13:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ff67983e95c71efb32b0792fce318bd5e20d559cd5b90030866ff9adcffa6fad"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"error","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"error","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/04dd1643b9be87f4863eca1c3280b89a937c2a471df76808587b5662f7c6333d"}
{"level":"error","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/794aa1fc2809d8882a45a4e1f4544043eb224e79d85feeff84e2329ba01d9b5b"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d4400225c15c96b0ba6fab134b8bd4400ab0ab41966c7683d9fb85684b8bc3c"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3befc3fb6e34a1e45e2af2aa0e707b9a8c52abde2196e3242d1b36028742481d"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3cf82a957501f6fc86833bc91e01ea70e3eb6f9a91a83d0dea1d0665105d435e"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4656683e96579e972a8b6ebc2e9f5032d73a3de0c867b1507841c739670b0668"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/563566df238538da72bdf366000a40e0b78b8977d49394c78822e502e120baee"}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c08e36c2deec7ee721c6c574a411f36d77945a0469795e9594586dabc3c14eff"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"}
{"level":"error","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d"}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"}
{"level":"info","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:56:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:56:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"debug","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"info","ts":"2026-07-05T13:56:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49078","PortSpecifier":{"PortValue":49078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49078","PortSpecifier":{"PortValue":49078}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259815,"nanos":172137610},"http":{"id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/sub-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d61557b9-4f0c-4f3b-8878-36b6514f68d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47762","PortSpecifier":{"PortValue":47762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7b9fceab-a85c-49dc-a629-2ee827750628","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47762","PortSpecifier":{"PortValue":47762}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259815,"nanos":214589282},"http":{"id":"7b9fceab-a85c-49dc-a629-2ee827750628","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/sub-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7b9fceab-a85c-49dc-a629-2ee827750628","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43da8188-3627-4154-9f32-fa3f029801e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49090","PortSpecifier":{"PortValue":49090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"43da8188-3627-4154-9f32-fa3f029801e4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"43da8188-3627-4154-9f32-fa3f029801e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49090","PortSpecifier":{"PortValue":49090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259815,"nanos":252267743},"http":{"id":"43da8188-3627-4154-9f32-fa3f029801e4","method":"GET","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1auILzKu3EHS4EMZI_SmYJFIrsTJ2OXosEb3dprFR8EqRYEEH0dgqeLE9YGRZ"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1auILzKu3EHS4EMZI_SmYJFIrsTJ2OXosEb3dprFR8EqRYEEH0dgqeLE9YGRZ\"}"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4f99d4d3-0e08-4404-9a40-4c0f49f9cea4","keyName":"e2e-sub-iso-76514b","subscription":"e2e-a-only-e8c42a","tenant":"e2e-shared-a-6096ec","userId":"4f99d4d3-0e08-4404-9a40-4c0f49f9cea4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"43da8188-3627-4154-9f32-fa3f029801e4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/sub-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e8c42a"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"43da8188-3627-4154-9f32-fa3f029801e4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43da8188-3627-4154-9f32-fa3f029801e4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"43da8188-3627-4154-9f32-fa3f029801e4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47764","PortSpecifier":{"PortValue":47764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259815,"nanos":295613529},"http":{"id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","method":"GET","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ZflZ5zU0LQvBplfF_bx0GKJ9vjgNcP9iK51sLb76HpvDhxMuhwE7xbDi4xfq"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ZflZ5zU0LQvBplfF_bx0GKJ9vjgNcP9iK51sLb76HpvDhxMuhwE7xbDi4xfq\"}"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"de74596f-e904-493a-a012-23b89bb073c3","keyName":"e2e-sub-iso-aa4087","subscription":"e2e-b-only-e8c42a","tenant":"e2e-shared-b-6579e1","userId":"de74596f-e904-493a-a012-23b89bb073c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/sub-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e8c42a"}
{"level":"info","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:56:55Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"abcd3115-cb46-46c6-ad9f-1a70ff55f507","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36196","PortSpecifier":{"PortValue":36196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36196","PortSpecifier":{"PortValue":36196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259825,"nanos":325097927},"http":{"id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/sub-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8cf4b9a2-35e6-431c-90a9-54397dcf8a9e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47500","PortSpecifier":{"PortValue":47500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d34ae77f-d70f-4513-b687-74ef004812fb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47500","PortSpecifier":{"PortValue":47500}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259825,"nanos":357837517},"http":{"id":"d34ae77f-d70f-4513-b687-74ef004812fb","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/sub-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d34ae77f-d70f-4513-b687-74ef004812fb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36198","PortSpecifier":{"PortValue":36198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:36198","PortSpecifier":{"PortValue":36198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259825,"nanos":386919383},"http":{"id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Oj8s9yQGw2hdoOMX_InJYMn15zsDORFEhK3wqSTmqXjtFjZStTrKzkf4gwNy"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Oj8s9yQGw2hdoOMX_InJYMn15zsDORFEhK3wqSTmqXjtFjZStTrKzkf4gwNy\"}"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"484da438-375a-4905-8dce-e360235b7ace","keyName":"e2e-sub-iso-4ce491","subscription":"e2e-shared-sub-a09601","tenant":"e2e-shared-a-6096ec","userId":"484da438-375a-4905-8dce-e360235b7ace","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/sub-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a09601"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ff74eb34-371a-4a35-9cf8-16dfea3149da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47512","PortSpecifier":{"PortValue":47512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78e583b6-1dba-4812-9c98-7a8f80c91659","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:47512","PortSpecifier":{"PortValue":47512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259825,"nanos":412263955},"http":{"id":"78e583b6-1dba-4812-9c98-7a8f80c91659","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1VcfNCKkQeA9ZtGsh_U7qOjGHcH2Ji06yS2hxGyzYRlffn2y07XdwbfVy7Vd2"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1VcfNCKkQeA9ZtGsh_U7qOjGHcH2Ji06yS2hxGyzYRlffn2y07XdwbfVy7Vd2\"}"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"79b34b90-a30b-43fa-82df-61b7ea6bc0ec","keyName":"e2e-sub-iso-c773b7","subscription":"e2e-shared-sub-a09601","tenant":"e2e-shared-b-6579e1","userId":"79b34b90-a30b-43fa-82df-61b7ea6bc0ec","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/sub-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a09601"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:57:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78e583b6-1dba-4812-9c98-7a8f80c91659","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b00e640dd11e9621904141eb5497063a382573b3382b649aaae5414ec01bfcb2"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2200bf072a54833509dc0759fff8d51734fa424a071a2bedda08b4f8505d9ca9"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/85765101861332d849bccd152934b05f5dd42ba6161d8ab90a48a2d5b1d8a40e"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f1c06f556ca5db32d7cf908b77ce8cddc87757aafef43ecd9d8c25ba1282608"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40746f396bda15348c72f51693b2c3c3c27bea6e8f75763b13c227218442396b"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/18257ab6d79083a48c5886b286414ad0155251fe9eb807bcd53b88757c25a3a6"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b625a8658330099d200805e0ef730c030a1659ddb6ae9a96fb7978e6ddc2b823"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/147d563de94748971306b96243d6c13b212264fe67c65586b8813acef12c3877"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4acc25e8967511cfdd30cb8e79f75d1c630b34813b810ff3b119dfeae53eef81"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/57091816d56488fa411d5ffafdd4671afa575f97956d08f01036d799a42785ab"}
{"level":"info","ts":"2026-07-05T13:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b36550f587a76f6af12032bc0bbf8c0501c59f2e80c5359570fbd310064e78b2"}
{"level":"info","ts":"2026-07-05T13:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d39fbadb3b143d3e249f119121f4132dd00fb0299202f6cf2bc6a3126eb60b93"}
{"level":"info","ts":"2026-07-05T13:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c7f64566baa83099749a2a370589e25d9c95812884edf18f3273ef79f9fd089"}
{"level":"info","ts":"2026-07-05T13:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78a7b95a8d563203a84cb7e3a9c70aa105aadc56bc5ff4e3b4654dd185bbe82d"}
{"level":"info","ts":"2026-07-05T13:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/361d32e801ff7f76543438d7b1e2e33774cca1d8e876324d3e2462afee03df8d"}
{"level":"info","ts":"2026-07-05T13:57:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c5361e842326eb354b2eb9201eb9949c3e8bf7fff77fd9169185327cdafd037"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"debug","ts":"2026-07-05T13:57:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"error","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8"}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"info","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"info","ts":"2026-07-05T13:57:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"}
{"level":"info","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:55Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:57:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"info","ts":"2026-07-05T13:57:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"debug","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-05T13:58:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"info","ts":"2026-07-05T13:58:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41068","PortSpecifier":{"PortValue":41068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c5162a71-5e05-436b-96d7-20cfcec009bb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41068","PortSpecifier":{"PortValue":41068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259898,"nanos":295099585},"http":{"id":"c5162a71-5e05-436b-96d7-20cfcec009bb","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c5162a71-5e05-436b-96d7-20cfcec009bb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49130","PortSpecifier":{"PortValue":49130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49130","PortSpecifier":{"PortValue":49130}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259898,"nanos":334116715},"http":{"id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8f9aa3e2-e689-47ad-8e83-3f590827ff98","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41080","PortSpecifier":{"PortValue":41080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41080","PortSpecifier":{"PortValue":41080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259898,"nanos":371462766},"http":{"id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v\"}"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","subscription":"e2e-rate-iso-a-7143be","tenant":"e2e-shared-a-6096ec","userId":"9e864716-2580-4abb-87e8-951b82b7358c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-7143be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7143be"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","selected_subscription":"e2e-rate-iso-a-7143be","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-7143be@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"242c3825-4b3b-4ebd-bf42-e787f5bae9d6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41092","PortSpecifier":{"PortValue":41092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41092","PortSpecifier":{"PortValue":41092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259899,"nanos":433884716},"http":{"id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v\"}"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","subscription":"e2e-rate-iso-a-7143be","tenant":"e2e-shared-a-6096ec","userId":"9e864716-2580-4abb-87e8-951b82b7358c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-7143be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7143be"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","selected_subscription":"e2e-rate-iso-a-7143be","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-7143be@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7de6e0a3-573f-4378-b8ee-59fe2452588c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fff531d-d751-43d3-b294-62c8de28e500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43232","PortSpecifier":{"PortValue":43232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7fff531d-d751-43d3-b294-62c8de28e500","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7fff531d-d751-43d3-b294-62c8de28e500","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43232","PortSpecifier":{"PortValue":43232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259900,"nanos":472434348},"http":{"id":"7fff531d-d751-43d3-b294-62c8de28e500","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14cZcbZMaGkV47lfc_km6phcOG8kKVOIOwdoUngSs3MYxf8OQthUzh97RwX6v\"}"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","subscription":"e2e-rate-iso-a-7143be","tenant":"e2e-shared-a-6096ec","userId":"9e864716-2580-4abb-87e8-951b82b7358c","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-7143be\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7fff531d-d751-43d3-b294-62c8de28e500","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-7143be"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7fff531d-d751-43d3-b294-62c8de28e500","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"9e864716-2580-4abb-87e8-951b82b7358c","keyName":"e2e-rate-a-7143be","selected_subscription":"e2e-rate-iso-a-7143be","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-7143be@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-7143be","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fff531d-d751-43d3-b294-62c8de28e500","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:20Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7fff531d-d751-43d3-b294-62c8de28e500","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35332","PortSpecifier":{"PortValue":35332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d3ca6b87-2b10-4312-9440-0a306fa13068","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35332","PortSpecifier":{"PortValue":35332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259911,"nanos":152052260},"http":{"id":"d3ca6b87-2b10-4312-9440-0a306fa13068","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.61:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d3ca6b87-2b10-4312-9440-0a306fa13068","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44328","PortSpecifier":{"PortValue":44328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"31aa6495-8f1c-443f-93a4-81bbf923d771","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44328","PortSpecifier":{"PortValue":44328}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259911,"nanos":196536720},"http":{"id":"31aa6495-8f1c-443f-93a4-81bbf923d771","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"]}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/9c5c8b7ef519"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=fa3fb69f-eeae-4a78-a124-92dcebbda876"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"0bd61a3b-0671-455e-895e-0ba8fe83d338","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"31aa6495-8f1c-443f-93a4-81bbf923d771","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35338","PortSpecifier":{"PortValue":35338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259911,"nanos":229712958},"http":{"id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd\"}"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","subscription":"e2e-rate-iso-a-1594eb","tenant":"e2e-shared-a-6096ec","userId":"c50a0179-2383-439a-9c8a-b02bf39260c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-1594eb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1594eb"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","selected_subscription":"e2e-rate-iso-a-1594eb","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-1594eb@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"93dab17e-c6c2-4fee-bef2-12659d3e95d7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35342","PortSpecifier":{"PortValue":35342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259912,"nanos":270917761},"http":{"id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd\"}"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","subscription":"e2e-rate-iso-a-1594eb","tenant":"e2e-shared-a-6096ec","userId":"c50a0179-2383-439a-9c8a-b02bf39260c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-1594eb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1594eb"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","selected_subscription":"e2e-rate-iso-a-1594eb","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-1594eb@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5decb0e3-4a07-4abf-89c2-53166e6c47e0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35356","PortSpecifier":{"PortValue":35356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a4311d41-8401-40ed-b733-72e43d728eaf","method":"POST","path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions","host":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:35356","PortSpecifier":{"PortValue":35356}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.61:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259913,"nanos":330904121},"http":{"id":"a4311d41-8401-40ed-b733-72e43d728eaf","method":"POST","headers":{":authority":"e2e-shared-a-6096ec.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-14KGWXeAsLHdBxCqc_I1rOECltGlHgI6EoK7BsrhQfYS9QxZu61YjxJQnMhUd\"}"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","subscription":"e2e-rate-iso-a-1594eb","tenant":"e2e-shared-a-6096ec","userId":"c50a0179-2383-439a-9c8a-b02bf39260c7","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\",\"requestedSubscription\":\"e2e-rate-iso-a-1594eb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-6096ec.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1594eb"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c50a0179-2383-439a-9c8a-b02bf39260c7","keyName":"e2e-rate-a-1594eb","selected_subscription":"e2e-rate-iso-a-1594eb","selected_subscription_key":"ai-tenant-e2e-shared-a-6096ec/e2e-rate-iso-a-1594eb@ai-tenant-e2e-shared-a-6096ec/rate-test-model-6096ec","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6096ec","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1594eb","namespace":"ai-tenant-e2e-shared-a-6096ec","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a4311d41-8401-40ed-b733-72e43d728eaf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44342","PortSpecifier":{"PortValue":44342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a204fad3-9263-40e4-bc18-28f1cb853061","method":"POST","path":"/ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1/v1/completions","host":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:44342","PortSpecifier":{"PortValue":44342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783259913,"nanos":367115801},"http":{"id":"a204fad3-9263-40e4-bc18-28f1cb853061","method":"POST","headers":{":authority":"e2e-shared-b-6579e1.apps.0da8ccf2-228e-4121-b2d5-9c5c8b7ef519.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xY051Yqfmvbalmyn_JWRXTUU3eRA55LimuH8puArn2kkQtSWasLbbUJV7WSV"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xY051Yqfmvbalmyn_JWRXTUU3eRA55LimuH8puArn2kkQtSWasLbbUJV7WSV\"}"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"61c0e38a-7d3d-45c3-9d76-433c23383ab8","keyName":"e2e-rate-b-1594eb","subscription":"e2e-rate-iso-b-1594eb","tenant":"e2e-shared-b-6579e1","userId":"61c0e38a-7d3d-45c3-9d76-433c23383ab8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1\",\"requestedSubscription\":\"e2e-rate-iso-b-1594eb\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-6579e1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-6579e1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1594eb","namespace":"ai-tenant-e2e-shared-b-6579e1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1594eb"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"61c0e38a-7d3d-45c3-9d76-433c23383ab8","keyName":"e2e-rate-b-1594eb","selected_subscription":"e2e-rate-iso-b-1594eb","selected_subscription_key":"ai-tenant-e2e-shared-b-6579e1/e2e-rate-iso-b-1594eb@ai-tenant-e2e-shared-b-6579e1/rate-test-model-6579e1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-6579e1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1594eb","namespace":"ai-tenant-e2e-shared-b-6579e1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-05T13:58:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a204fad3-9263-40e4-bc18-28f1cb853061","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-05T13:58:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea4bb98a1e0da9a6b87f13f4ec62ab6cc2453a839d43624216a0b725fbb08871"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/837f634937d963f616442cb29fe3f921f35920fcccd031b4f9c06f01aaebad53"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac603a828fc60b6078617a8d3ceadcb93397aae4e5394bfa605612f4d040579e"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/209871bd02e6075724ce8a9b527c0590f0be4d600e52055af6ae5a7e88dde0f8"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c747fad23a4689902678102466ab1aec237ba2045d0a1afaba81e0a806a07c71"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ad7bdd4121895ba1c0caa57617987a8ade1ff0ece0cbc07303056b66392718b8"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15a8163eff16e663804aa9fd5a73463dd54e3708bd88ed728a44316d02d92a60"}
{"level":"info","ts":"2026-07-05T13:58:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c03b5f17467eb4db48eb95c03c99f0d1ff811b91fd121d18749d5c071ef2e278"}
{"level":"info","ts":"2026-07-05T13:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7fe76c697ef3ff646e3faeaf450dd8887650b4f894bb9b514abe1c713c15615c"}
{"level":"info","ts":"2026-07-05T13:58:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e58343adfa2e866bdcc7f3f9c66c3f7ec75d429f659d2221dd65d173c3b05796"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0756046a11bd662b93835e9f633e57f68beb45a0283612cf9527d8e31b1178ac"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aa687913ca8846c4dda5de5df2f1dc151103d8510f8af95b237c7a84bccdeab"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/29b7c467dc1955b2f7d142104ac6f4cf5f72b834e9b27ee2027f580604a8b1f0"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3539b8d4e48ef7145a7a7061c26a6b8da3f48733cb963b9103eca334e65e8466"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39558e4d690f958f78e08f92eb0ba9b260c362160c74f05c1f80b5fbce7c2bea"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8968f33f472a85e392d3da241215e0aaffbff4341248cb77cee8b07f841b289b"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/98676d2a300c46c58fd37e447e2692135561953f8498b92b97116c34e797367a"}
{"level":"info","ts":"2026-07-05T13:58:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/922c7458bc8c03dd6c75147cf1fe7ffde2e6ab2fcb0443bd7b3a856564a74b6b"}
{"level":"info","ts":"2026-07-05T13:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6de23661b7c3d4baf2f9039757c47d82ae119cb7c9f14b3cb98568122f5a2f80"}
{"level":"info","ts":"2026-07-05T13:59:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6054cb96c79734a2d5d488520d17963444cdca1a20fc092b55ac8c57418e0880"}