--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fca9e41f019aa33ea14a08c2369ad54cd8e7611aa9ca16d3dbead6968af06037"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6"}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:24:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"}
{"level":"info","ts":"2026-07-06T14:24:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce"}
{"level":"info","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57378","PortSpecifier":{"PortValue":57378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57378","PortSpecifier":{"PortValue":57378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347877,"nanos":309917153},"http":{"id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","method":"POST","headers":{":authority":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"033854da8e11d80245d2bd6b11fc99424b9b027e1230fec7c2dcd72ded0baf79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:24:37Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afa189c8-ed3e-4cf8-82c0-93721105f5cf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57388","PortSpecifier":{"PortValue":57388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","method":"POST","path":"/ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1/v1/chat/completions","host":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57388","PortSpecifier":{"PortValue":57388}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347881,"nanos":373060939},"http":{"id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","method":"POST","headers":{":authority":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1P5rfLCTQRprL9Huu_GL00Yn3jUvopq66OPqtEhyAC5BPIqLg4m70wmOftFmg"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-2b44a1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1P5rfLCTQRprL9Huu_GL00Yn3jUvopq66OPqtEhyAC5BPIqLg4m70wmOftFmg\"}"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2b44a1.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"cf5a1322-e835-409c-961c-3efd1a2cdeb6","keyName":"e2e-tenant-inference-2b44a1","subscription":"test-model-2b44a1-sub","tenant":"e2e-inf-a-2b44a1","userId":"cf5a1322-e835-409c-961c-3efd1a2cdeb6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-2b44a1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1\",\"requestedSubscription\":\"test-model-2b44a1-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-2b44a1.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-2b44a1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2b44a1-sub","namespace":"ai-tenant-e2e-inf-a-2b44a1","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-2b44a1-sub"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"cf5a1322-e835-409c-961c-3efd1a2cdeb6","keyName":"e2e-tenant-inference-2b44a1","selected_subscription":"test-model-2b44a1-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1-sub@ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-2b44a1","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-2b44a1-sub","namespace":"ai-tenant-e2e-inf-a-2b44a1","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3894b3ab-3804-461b-bf15-f86b4b5b58d5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57404","PortSpecifier":{"PortValue":57404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:57404","PortSpecifier":{"PortValue":57404}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.51:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347881,"nanos":670043328},"http":{"id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","method":"POST","headers":{":authority":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"033854da8e11d80245d2bd6b11fc99424b9b027e1230fec7c2dcd72ded0baf79"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.51:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-2b44a1.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-2b44a1/test-model-2b44a1\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1d4d91bd-11f6-4caa-8f91-79a6a61a0dc8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48648","PortSpecifier":{"PortValue":48648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","method":"POST","path":"/ai-tenant-e2e-inf-b-198d8c/test-model-198d8c/v1/chat/completions","host":"e2e-inf-b-198d8c.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48648","PortSpecifier":{"PortValue":48648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.52:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783347881,"nanos":705285367},"http":{"id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","method":"POST","headers":{":authority":"e2e-inf-b-198d8c.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-198d8c/test-model-198d8c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tQXpISisvDKUAWcM_RK5QSHccUYEoFxVeuvGBLDqS7d0b7hYSxVsZmPcAwlE"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-198d8c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tQXpISisvDKUAWcM_RK5QSHccUYEoFxVeuvGBLDqS7d0b7hYSxVsZmPcAwlE\"}"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-198d8c.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-198d8c.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.52:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-198d8c.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-198d8c/test-model-198d8c/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:24:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8b70a6ec-cfe9-46e1-9db3-883ee26e2052","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T14:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1795624197710178797018a7e86fb2a69bd3a3ca361241a3a0dc834d2f292cd3"}
{"level":"info","ts":"2026-07-06T14:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e65ca61eff0082b64ee222431d29ed0ad2e6645534795c0dc46b294890985c2a"}
{"level":"info","ts":"2026-07-06T14:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fca9e41f019aa33ea14a08c2369ad54cd8e7611aa9ca16d3dbead6968af06037"}
{"level":"info","ts":"2026-07-06T14:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd4ffe71ab6d70b89b30b4f0d6b145200ac23ca7f08fcdbcd719eaccd33a49ec"}
{"level":"info","ts":"2026-07-06T14:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/182c445692e3a924ad61215af084be9998f806f49074dcdfc3471abda281962a"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/071d2de86d852c686cd41930f5f206fc69898aca187bfc2df08a670cba5078c8"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c1239fdc3ca272639996aedd521187a975d413ee0d9c7fdb2f8c9b64a7b65e85"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d477be58fedd64fa94d24a03b65e71cb6f0bf3f677fce69a430ddf5e5ddf9cb8"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8460e86e81a1bdbed843659d8e998e16c86f6c9faf004244fbd628dec6270eb5"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/60a487849f343bab2fea2f829c8395160b3498befb6fda336bffd6bbce6ab936"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/da5fe77368cf3ddcd29367558eb1a0343a4b34ed2f65780f61711f640910f21a"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1156cafa13bc715ab293b5bb88220a05fb020b5ab07878ba23923e5291954ce"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbf23bdde95c0714d3e6b007e75fc36f837613ebf4133549d6c2f6f5a54c0fc1"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2a68fc2f7b182d21a6d933d8efb424493635d261ea09c7390a3bd2a954abc363"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3c5cc803f4f6797b20262dadd2b9648ac7048180d2600c9cb4e100d51b07620d"}
{"level":"info","ts":"2026-07-06T14:24:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/117fa70031a23cbdbe92661c5b4dc23806965e5a456e6861dc9f2e27944dac51"}
{"level":"info","ts":"2026-07-06T14:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/359ce9d212c3cfb71ff19d722b4bf9cc8ade20f8fde7a0445bc6939c8db155d3"}
{"level":"info","ts":"2026-07-06T14:24:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/033854da8e11d80245d2bd6b11fc99424b9b027e1230fec7c2dcd72ded0baf79"}
{"level":"info","ts":"2026-07-06T14:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecf0c3086b55b7f96b5d18b3430c236abab0398d863cce6a8776c163d65dd6a6"}
{"level":"info","ts":"2026-07-06T14:25:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ca305465c36cf1d0cd2770addb8988250adb789a76b949f70cba8086087900f"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031"}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031"}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36"}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36"}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:25:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:25:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36"}
{"level":"info","ts":"2026-07-06T14:26:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e14a3d0e6cf8b3e94dc1e0606bd5961e7123b9bc4aa5ad9e17fb228e2f273031"}
{"level":"info","ts":"2026-07-06T14:26:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22b424dd50fa68275f333caa0738f5d9d780b41a155b035bad0be5e7591db93b"}
{"level":"info","ts":"2026-07-06T14:26:09Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acf377e54a478bd0f96fa6612dcff464a5342702444fe8847f13b0083fe977c1"}
{"level":"info","ts":"2026-07-06T14:26:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/149a87e274ce1018a11de7e7ecda0cb2b8596241bdb5a4e8e9b51cc357104a36"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c"}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d"}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b"}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"debug","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c"}
{"level":"info","ts":"2026-07-06T14:27:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55"}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"info","ts":"2026-07-06T14:27:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:27:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:27:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42922","PortSpecifier":{"PortValue":42922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42922","PortSpecifier":{"PortValue":42922}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348072,"nanos":268292702},"http":{"id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16687cfb-10c4-4dbe-b35a-0bafe8366365","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60098","PortSpecifier":{"PortValue":60098}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348072,"nanos":327252996},"http":{"id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"19080c2f-d55a-459b-ba5b-ce832ab4b951","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42932","PortSpecifier":{"PortValue":42932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87e92594-b412-41aa-b1e5-c595e248ba06","method":"GET","path":"/maas-api/v1/api-keys/9d9ca5a6-15af-4e31-9643-d43211e952cd","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42932","PortSpecifier":{"PortValue":42932}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348072,"nanos":417247250},"http":{"id":"87e92594-b412-41aa-b1e5-c595e248ba06","method":"GET","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d9ca5a6-15af-4e31-9643-d43211e952cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9d9ca5a6-15af-4e31-9643-d43211e952cd",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87e92594-b412-41aa-b1e5-c595e248ba06","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60106","PortSpecifier":{"PortValue":60106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4a021dac-10fc-41ae-984f-7f14f96648f1","method":"GET","path":"/maas-api/v1/api-keys/e9357cc9-a4d0-453c-b08f-ca10c91c6f69","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60106","PortSpecifier":{"PortValue":60106}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348072,"nanos":453213526},"http":{"id":"4a021dac-10fc-41ae-984f-7f14f96648f1","method":"GET","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e9357cc9-a4d0-453c-b08f-ca10c91c6f69",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/e9357cc9-a4d0-453c-b08f-ca10c91c6f69",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:27:52Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4a021dac-10fc-41ae-984f-7f14f96648f1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60712","PortSpecifier":{"PortValue":60712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60712","PortSpecifier":{"PortValue":60712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348089,"nanos":659210438},"http":{"id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ac301aff-c701-40f9-ad3b-7f80828a42dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33426","PortSpecifier":{"PortValue":33426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33426","PortSpecifier":{"PortValue":33426}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348089,"nanos":692741737},"http":{"id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9e4b137b-e28f-4fcf-817c-6f146afe11cd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60724","PortSpecifier":{"PortValue":60724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60724","PortSpecifier":{"PortValue":60724}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348089,"nanos":737933544},"http":{"id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","method":"GET","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CzDvkj04NMifI98u_QnAeSdTTWrWF9NJwf3p1ONsfaCID0gASwItIQmUh4fm"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CzDvkj04NMifI98u_QnAeSdTTWrWF9NJwf3p1ONsfaCID0gASwItIQmUh4fm\"}"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"0f2132ab-86aa-443c-b202-487c819e6647","keyName":"e2e-auth-iso-a-6130c5","subscription":"e2e-auth-iso-66752c","tenant":"e2e-shared-a-2c86e0","userId":"0f2132ab-86aa-443c-b202-487c819e6647","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-66752c"}
{"level":"info","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"73e6a524-27d3-4e61-b72c-b9ce556f5118","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"74d21f21-7ee2-401c-bac0-85cbafa27237","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39430","PortSpecifier":{"PortValue":39430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348113,"nanos":244737834},"http":{"id":"74d21f21-7ee2-401c-bac0-85cbafa27237","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"74d21f21-7ee2-401c-bac0-85cbafa27237","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34940","PortSpecifier":{"PortValue":34940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34940","PortSpecifier":{"PortValue":34940}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348113,"nanos":281961617},"http":{"id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1a3887e-8b2c-43c8-ab5b-d63b682d109f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34954","PortSpecifier":{"PortValue":34954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"532a2ef2-2191-499d-a637-77a3bca0e962","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:34954","PortSpecifier":{"PortValue":34954}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348113,"nanos":317974355},"http":{"id":"532a2ef2-2191-499d-a637-77a3bca0e962","method":"GET","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-5RQOq2Ns7rIznWgx_EP7n5NsV1o7GFkkdIZnknISpaHyXstQV549Q4n3iVTJ"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-5RQOq2Ns7rIznWgx_EP7n5NsV1o7GFkkdIZnknISpaHyXstQV549Q4n3iVTJ\"}"}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T14:28:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"532a2ef2-2191-499d-a637-77a3bca0e962","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47650","PortSpecifier":{"PortValue":47650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47650","PortSpecifier":{"PortValue":47650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348130,"nanos":525164856},"http":{"id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3fcdc15-bfb3-4271-b155-9e2bd9ac1309","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39450","PortSpecifier":{"PortValue":39450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39450","PortSpecifier":{"PortValue":39450}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348130,"nanos":556965116},"http":{"id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"16b8bb5f-db97-49fa-b69d-485f5a5a2aa4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47652","PortSpecifier":{"PortValue":47652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348130,"nanos":596208228},"http":{"id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"daf0ff21-e265-4a60-bfd9-6dbdf2b06239","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39466","PortSpecifier":{"PortValue":39466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:39466","PortSpecifier":{"PortValue":39466}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348130,"nanos":636247347},"http":{"id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:28:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9819e14-a35b-4d63-bfa0-575a12aaf610","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37678","PortSpecifier":{"PortValue":37678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37678","PortSpecifier":{"PortValue":37678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348147,"nanos":754515167},"http":{"id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15eefeaa-eb62-4c67-a839-dfbf2cb989b5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50066","PortSpecifier":{"PortValue":50066}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348147,"nanos":793353490},"http":{"id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7e673b7-a91e-4a6c-adcb-038c75de6d97","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50080","PortSpecifier":{"PortValue":50080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","method":"GET","path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50080","PortSpecifier":{"PortValue":50080}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348147,"nanos":830673626},"http":{"id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","method":"GET","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c9e31447-3e61-47d3-b61a-e4b4c4cd9768","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37692","PortSpecifier":{"PortValue":37692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","method":"GET","path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37692","PortSpecifier":{"PortValue":37692}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348147,"nanos":863312827},"http":{"id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","method":"GET","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d570899c-d3b3-40a7-9655-6aca5f507d93",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:07Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b75c1ab-6ade-4c97-9037-b4b40767c253","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51650","PortSpecifier":{"PortValue":51650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51650","PortSpecifier":{"PortValue":51650}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348165,"nanos":5901390},"http":{"id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3625d77-cba4-4f26-8eba-570cedd3dfcb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48732","PortSpecifier":{"PortValue":48732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3633f039-d998-4d4b-a8be-2774f24c3af2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:48732","PortSpecifier":{"PortValue":48732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348165,"nanos":38847907},"http":{"id":"3633f039-d998-4d4b-a8be-2774f24c3af2","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/auth-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3633f039-d998-4d4b-a8be-2774f24c3af2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"163bccd4-43dc-468f-8e0b-22259c761e7b","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51654","PortSpecifier":{"PortValue":51654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348165,"nanos":72684878},"http":{"id":"163bccd4-43dc-468f-8e0b-22259c761e7b","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-mG0hGGDcO9uPbcoS_Tqbynzb3zxG8XSMhqu0FfO9tRSZZ0AXOKByMSsumHxe"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-mG0hGGDcO9uPbcoS_Tqbynzb3zxG8XSMhqu0FfO9tRSZZ0AXOKByMSsumHxe\"}"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"30894eb4-635e-4e2b-9fcc-5fb90ad942c4","keyName":"e2e-auth-iso-a-217be5","subscription":"e2e-auth-iso-12b536","tenant":"e2e-shared-a-2c86e0","userId":"30894eb4-635e-4e2b-9fcc-5fb90ad942c4","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/auth-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-12b536"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:29:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"163bccd4-43dc-468f-8e0b-22259c761e7b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/466b54d389ee0c6f39d74484dead2b8c47b4b0aedb03feb801052c692a90dd58"}
{"level":"info","ts":"2026-07-06T14:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/870d43afec58857d3543c57430070368fb41de8877dcba254430d4f4076b73ac"}
{"level":"info","ts":"2026-07-06T14:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50096e7217ef82f18c42cd1e1418082473b6f7ad13f1b11121f0b4d3c2a9a4ad"}
{"level":"info","ts":"2026-07-06T14:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8f16099ae389488567fded2119a93dc058c4ac385f9c7f736cd0423313eb0c55"}
{"level":"info","ts":"2026-07-06T14:29:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c769b816ce5f2c38de8ee5148e072c340fa054dada27ddfabfc415e698538b74"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62fdba8f1234b3179fc2d7d2a2b9ff1515d3c403f5cf2bf06247608e6287a646"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e81bc89cce3f3c56a33b064f31edc2db43621115cdeeb3e2ac68abb1afabe94c"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a37b6ead0d28ba653cc099af1ecc101dc546a9abc9da45e0fbfd931871e3e42a"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ebd37391aeb89d50446b2939a6a2ffedb5aa989af7901643c4406959cc0ee1c"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56b8dc96529ec12361e724af937dc6363208a2d3f64ae026bbd930d845aa0c42"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9e2184f58529a8e2ae2e872961f1ee0b327e58d43e2dfe90f4e8ce610bfcaab0"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15ae7339fbcb33edb94ad37a7837195ecc45d1abbf8733ecf2cc3aed68d3f9d5"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ea8f5717152f45f76187de9225940196ab49871c277c9729e834d3974f9b6974"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f284a6e518fa7f66cfee5f984131eaa3f0cc01ff2d119504de8825dceae1718b"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2cfc382dad2527a0e27b6381c54e0219b581084a09c89aa5fa14e5f51ed90ee0"}
{"level":"info","ts":"2026-07-06T14:29:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/239f3699095283debb605689b00a25f9f8714440dad82a97569b5f780b5d754d"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264"}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:29:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:29:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"error","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"error","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"}
{"level":"error","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"error","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:30:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264"}
{"level":"debug","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:30:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47330","PortSpecifier":{"PortValue":47330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47330","PortSpecifier":{"PortValue":47330}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348225,"nanos":619308136},"http":{"id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/sub-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c694f27-8e6c-452a-b976-1d04a64ad4e1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41198","PortSpecifier":{"PortValue":41198}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348225,"nanos":656928089},"http":{"id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/sub-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f00819c1-dad2-4bd5-8cda-7d00f7da2309","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47338","PortSpecifier":{"PortValue":47338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:47338","PortSpecifier":{"PortValue":47338}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348225,"nanos":694176365},"http":{"id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","method":"GET","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-tlHYE3yn6rdxjUbp_JFMMInCVYthcnHxTVaUwLmHmph0VZhMAmqAcFGddAm7"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-tlHYE3yn6rdxjUbp_JFMMInCVYthcnHxTVaUwLmHmph0VZhMAmqAcFGddAm7\"}"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4caf73c7-23db-43c3-99c1-8b58f76e4eea","keyName":"e2e-sub-iso-3842a0","subscription":"e2e-a-only-cb3186","tenant":"e2e-shared-a-2c86e0","userId":"4caf73c7-23db-43c3-99c1-8b58f76e4eea","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/sub-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-cb3186"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ef693df-ff3b-4a1e-bd28-068dffd7f705","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41210","PortSpecifier":{"PortValue":41210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348225,"nanos":733381685},"http":{"id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","method":"GET","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-CJAU0nJaZCbVrkKw_CXho8UGunkXeXBVSXHkTLL5QMGFwIzpIfb0KM8WI2D2"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-CJAU0nJaZCbVrkKw_CXho8UGunkXeXBVSXHkTLL5QMGFwIzpIfb0KM8WI2D2\"}"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4cbf4e7b-2faf-46d9-9c07-524149865c79","keyName":"e2e-sub-iso-1f612e","subscription":"e2e-b-only-cb3186","tenant":"e2e-shared-b-eb526a","userId":"4cbf4e7b-2faf-46d9-9c07-524149865c79","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/sub-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-cb3186"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:25Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1cd59478-0792-400d-ae00-e7eab5a9b5c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15fd9266-5945-4a42-a716-e39f47557c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38238","PortSpecifier":{"PortValue":38238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"15fd9266-5945-4a42-a716-e39f47557c11","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"15fd9266-5945-4a42-a716-e39f47557c11","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38238","PortSpecifier":{"PortValue":38238}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348241,"nanos":920867838},"http":{"id":"15fd9266-5945-4a42-a716-e39f47557c11","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"15fd9266-5945-4a42-a716-e39f47557c11","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"15fd9266-5945-4a42-a716-e39f47557c11","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/sub-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"15fd9266-5945-4a42-a716-e39f47557c11","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15fd9266-5945-4a42-a716-e39f47557c11","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"15fd9266-5945-4a42-a716-e39f47557c11","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44666","PortSpecifier":{"PortValue":44666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"613d76a1-c172-4601-adb5-8d23bf0d9019","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44666","PortSpecifier":{"PortValue":44666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348241,"nanos":956712701},"http":{"id":"613d76a1-c172-4601-adb5-8d23bf0d9019","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/sub-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"613d76a1-c172-4601-adb5-8d23bf0d9019","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a555505-4a62-4369-99a4-be18e55edaed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a555505-4a62-4369-99a4-be18e55edaed","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a555505-4a62-4369-99a4-be18e55edaed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:38242","PortSpecifier":{"PortValue":38242}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348241,"nanos":991514837},"http":{"id":"5a555505-4a62-4369-99a4-be18e55edaed","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-WFA5O4Bqix13Mmq4_1qzX4GGA73yrNIdxPZdyMXnyEf7T1FhNPfZ3unc3Q4z"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-WFA5O4Bqix13Mmq4_1qzX4GGA73yrNIdxPZdyMXnyEf7T1FhNPfZ3unc3Q4z\"}"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"34e483f8-4873-47d0-8d9b-0bc7bc6c9df8","keyName":"e2e-sub-iso-121234","subscription":"e2e-shared-sub-f886c9","tenant":"e2e-shared-a-2c86e0","userId":"34e483f8-4873-47d0-8d9b-0bc7bc6c9df8","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a555505-4a62-4369-99a4-be18e55edaed","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/sub-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a555505-4a62-4369-99a4-be18e55edaed","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f886c9"}
{"level":"info","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a555505-4a62-4369-99a4-be18e55edaed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a555505-4a62-4369-99a4-be18e55edaed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44682","PortSpecifier":{"PortValue":44682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44682","PortSpecifier":{"PortValue":44682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348242,"nanos":19993871},"http":{"id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Fgs8OiC5GQv8tRup_4QXc9QYG5mODNN69A9u6jt5b8gNnoGPWWHx58hWrijL"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Fgs8OiC5GQv8tRup_4QXc9QYG5mODNN69A9u6jt5b8gNnoGPWWHx58hWrijL\"}"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"536b354c-b448-4446-9034-611d61cc4888","keyName":"e2e-sub-iso-dde675","subscription":"e2e-shared-sub-f886c9","tenant":"e2e-shared-b-eb526a","userId":"536b354c-b448-4446-9034-611d61cc4888","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/sub-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-f886c9"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:30:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf867e2c-dc3c-46f5-a569-3de6a7600237","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f1e4986301aa0faabd718696496f51f1d5b6152d00e89bb93afccaa049d61b2c"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7ac9deec94e3ac7762d82570d3959be7f8b10b1229fd5974d8aa08f8527fca74"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c3ba8bae2a34a3bbbcd91030edaae9793b316a3581e8b151c934533657984450"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e4d12d36e63b7d4c9a5dd1addd59a1146510a249257fbe21e401cf297322264"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6b4a069a0512859fd2b32fe79220c3289fc5745dc3dded41d76ae62dbf9b919"}
{"level":"info","ts":"2026-07-06T14:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b7ade665b3cfe323a55407a44eeb9505d3332698e7b8cef985582dd43003923"}
{"level":"info","ts":"2026-07-06T14:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1f811e82deae0689eaebc3dd2c24f68c35ffe4cfdfa77513de7b86adfbc5f27c"}
{"level":"info","ts":"2026-07-06T14:30:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a867eda593031d6afba43306eea65906d499a691ba282c034342d1267e7f3f"}
{"level":"info","ts":"2026-07-06T14:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa560ee2eb8cf45564f05eee7018a72833dcf1439f31be3998855849dc93536e"}
{"level":"info","ts":"2026-07-06T14:30:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9035e5ad3af1464558263ba2489eecf44f85f495123b56b7f457c1d18e3d441e"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d9b34f579da0f88f6a549e38e128573f56ca5e6fd011f618f89c169d38bcadb1"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/eb2f922b97339726c2555cbecdd4f7eae7523956f06d8b06bda6d90e0f96b3e8"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc866adb4745199115010b9ebbae4efdea2c065ccced3d863c7e2ab1261c411f"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/488ab106e06c5b46bae1aef9be7a8d16644bd899cd550c01601ca2897983d609"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/70a58c3381cbb6131ae1d5609348aa2eaae3300dea2a9f088082b8570bf339b5"}
{"level":"info","ts":"2026-07-06T14:30:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39fbce644fa0cca3c98c0c160b61dcf9ee586928e151f7b8fcce91bb40e75564"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"error","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"debug","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:02Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"debug","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"}
{"level":"debug","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"debug","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"debug","ts":"2026-07-06T14:31:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T14:31:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"}
{"level":"info","ts":"2026-07-06T14:31:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"387d817d-0428-4014-b3ae-a8588b2a6198","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41010","PortSpecifier":{"PortValue":41010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348304,"nanos":988669444},"http":{"id":"387d817d-0428-4014-b3ae-a8588b2a6198","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"387d817d-0428-4014-b3ae-a8588b2a6198","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36256","PortSpecifier":{"PortValue":36256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36256","PortSpecifier":{"PortValue":36256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348305,"nanos":52229399},"http":{"id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"41972b98-627e-41ce-b9ef-e7ae0b12d85a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41020","PortSpecifier":{"PortValue":41020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41020","PortSpecifier":{"PortValue":41020}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348305,"nanos":88927940},"http":{"id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul\"}"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","subscription":"e2e-rate-iso-a-56796a","tenant":"e2e-shared-a-2c86e0","userId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-56796a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56796a"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","selected_subscription":"e2e-rate-iso-a-56796a","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-56796a@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:31:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b1d91888-eaad-487a-9bcf-9b5aa56eb7f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41030","PortSpecifier":{"PortValue":41030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0e34ae21-332e-4a09-8c2d-f7d185395915","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41030","PortSpecifier":{"PortValue":41030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348306,"nanos":149361899},"http":{"id":"0e34ae21-332e-4a09-8c2d-f7d185395915","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul\"}"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","subscription":"e2e-rate-iso-a-56796a","tenant":"e2e-shared-a-2c86e0","userId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-56796a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56796a"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","selected_subscription":"e2e-rate-iso-a-56796a","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-56796a@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:31:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0e34ae21-332e-4a09-8c2d-f7d185395915","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41038","PortSpecifier":{"PortValue":41038}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348307,"nanos":186675937},"http":{"id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-BBZjAf88cMjyAEBL_XX16kyh8Q8OL0VsXeugB32NiHSYNT7MVjuoBJHsQlul\"}"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","subscription":"e2e-rate-iso-a-56796a","tenant":"e2e-shared-a-2c86e0","userId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-56796a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-56796a"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f44ea14c-870e-4ad3-932f-f4c03fefa793","keyName":"e2e-rate-a-56796a","selected_subscription":"e2e-rate-iso-a-56796a","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-56796a@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-56796a","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:31:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"583cbb03-dde7-47c4-9d3f-d5d46024e191","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56176","PortSpecifier":{"PortValue":56176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56176","PortSpecifier":{"PortValue":56176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348324,"nanos":232897388},"http":{"id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.55:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27fa82a5-09ba-470f-acc7-0bc22d2bc918","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33848","PortSpecifier":{"PortValue":33848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33848","PortSpecifier":{"PortValue":33848}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348324,"nanos":269854222},"http":{"id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"]}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/bdacd8f7c76d"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=293c0ac8-7268-4b65-9de0-29fed61eb49f"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"78d4e184-d923-40d9-9d79-4ee3433673b7","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fd5842c4-c7bd-4a36-a66d-b1e5d8678bf0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56182","PortSpecifier":{"PortValue":56182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d4ffe0de-762a-4294-a17a-8359f781e21a","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56182","PortSpecifier":{"PortValue":56182}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348324,"nanos":308942907},"http":{"id":"d4ffe0de-762a-4294-a17a-8359f781e21a","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6\"}"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","subscription":"e2e-rate-iso-a-72c10f","tenant":"e2e-shared-a-2c86e0","userId":"3eca9079-bed5-4cd8-876e-b293ad07d924","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-72c10f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72c10f"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","selected_subscription":"e2e-rate-iso-a-72c10f","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-72c10f@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d4ffe0de-762a-4294-a17a-8359f781e21a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56194","PortSpecifier":{"PortValue":56194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"56324967-2e57-45b6-b0a4-907bfadee28e","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56194","PortSpecifier":{"PortValue":56194}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348325,"nanos":344361844},"http":{"id":"56324967-2e57-45b6-b0a4-907bfadee28e","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6\"}"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","subscription":"e2e-rate-iso-a-72c10f","tenant":"e2e-shared-a-2c86e0","userId":"3eca9079-bed5-4cd8-876e-b293ad07d924","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-72c10f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72c10f"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","selected_subscription":"e2e-rate-iso-a-72c10f","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-72c10f@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"56324967-2e57-45b6-b0a4-907bfadee28e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56204","PortSpecifier":{"PortValue":56204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","method":"POST","path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions","host":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:56204","PortSpecifier":{"PortValue":56204}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.55:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348326,"nanos":379780095},"http":{"id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","method":"POST","headers":{":authority":"e2e-shared-a-2c86e0.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-lDAqCQmeUOE8Er9H_UZwJ8xEfEDhGLlg6I9ZKJsOvJ8VATMLVjkAmB3v3zU6\"}"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","subscription":"e2e-rate-iso-a-72c10f","tenant":"e2e-shared-a-2c86e0","userId":"3eca9079-bed5-4cd8-876e-b293ad07d924","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\",\"requestedSubscription\":\"e2e-rate-iso-a-72c10f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2c86e0.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-72c10f"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3eca9079-bed5-4cd8-876e-b293ad07d924","keyName":"e2e-rate-a-72c10f","selected_subscription":"e2e-rate-iso-a-72c10f","selected_subscription_key":"ai-tenant-e2e-shared-a-2c86e0/e2e-rate-iso-a-72c10f@ai-tenant-e2e-shared-a-2c86e0/rate-test-model-2c86e0","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2c86e0","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-72c10f","namespace":"ai-tenant-e2e-shared-a-2c86e0","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"163e3cf9-3b01-4ff7-8a0a-ac13f3926aff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33864","PortSpecifier":{"PortValue":33864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8320eac-920b-452c-84cd-9fd6c2953566","method":"POST","path":"/ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a/v1/completions","host":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33864","PortSpecifier":{"PortValue":33864}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783348326,"nanos":410562859},"http":{"id":"b8320eac-920b-452c-84cd-9fd6c2953566","method":"POST","headers":{":authority":"e2e-shared-b-eb526a.apps.7071bbd9-f261-4d60-a328-bdacd8f7c76d.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-EyWoDOrYI8fc1frj_LnvcFq7FXsBblR0Ph9zORUkCnG2NKdthB4ESeh6qwL2"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-EyWoDOrYI8fc1frj_LnvcFq7FXsBblR0Ph9zORUkCnG2NKdthB4ESeh6qwL2\"}"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"5328b818-8c84-44ae-bb63-a76506f0e3c3","keyName":"e2e-rate-b-72c10f","subscription":"e2e-rate-iso-b-72c10f","tenant":"e2e-shared-b-eb526a","userId":"5328b818-8c84-44ae-bb63-a76506f0e3c3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a\",\"requestedSubscription\":\"e2e-rate-iso-b-72c10f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-eb526a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-eb526a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-72c10f","namespace":"ai-tenant-e2e-shared-b-eb526a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-72c10f"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"5328b818-8c84-44ae-bb63-a76506f0e3c3","keyName":"e2e-rate-b-72c10f","selected_subscription":"e2e-rate-iso-b-72c10f","selected_subscription_key":"ai-tenant-e2e-shared-b-eb526a/e2e-rate-iso-b-72c10f@ai-tenant-e2e-shared-b-eb526a/rate-test-model-eb526a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-eb526a","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-72c10f","namespace":"ai-tenant-e2e-shared-b-eb526a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T14:32:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8320eac-920b-452c-84cd-9fd6c2953566","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T14:32:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/89bcbc1de2bf58ed05f5899fd405ecfa829666e16c7386f65fc184f55a775d57"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23fcfda1d9e5d9a07270d5cb7c6e5797645caf55cd29397e5a0aea604be86078"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/42e767f884a3f3aef8d5ea9045bc1fb18e0c78b9b2da3f9cea9ed3636b07c027"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40e176988481781472a73f785130faab3c2c467c07c8702df0743df9cea678e6"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac5cdc676e74c5e147e9bad37793de7e042b0e74e09e993b892b78b8efbd95b8"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/568cc47ad3fe6cc32218a645f6fa8998c85517cd3caa80026617542d452b0c39"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b686101c6d2b9865aad09b46b5031d9727d92cdf5468fbed31784ab1ceb7c930"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6d65cb35d4b819c6d0508cb7512a5d59e6647e4bffd9127a1f874d5e1d4e03cb"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c6c4620ab5437a8f4297010d31702d8d1f3bc4a7bb660a8f0a8e9dc34fd25d8b"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e83c0bca68f1deeed8eb68b4ef398833fb9dbd3ec27e4f03c18a55eb7bee5ecb"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc13bd63603d191b0e93675fc0d636f66b720ebc3782339191a0f747c533336b"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0318b4eef8088fc3863d192e146aab70a7942752139b03635a0143519b7a386"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58b8585f1532d1744dec98ab289956c63e357754745e46b8defc57b03ce728e9"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c694762e55ca97519a751768439c169bd6946e30203593ad9ab7f7dfdc8b157c"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc7148248847c7066e79f99110697058c006530fa1b2bf2b828aa3e1b4a1552c"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb73ccb1427863eb1fe71cd0901b2669e42f5f97cd93db7c4cd6139ce6cf83ed"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/13d339e4736b8f08fd082ff6e1651ad459f4dc87591ce80addb2d1f16bd37570"}
{"level":"info","ts":"2026-07-06T14:32:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/994e17d3c06ceffd51cd7bca924182aaa9548ec52560543ab88361b24f4d437e"}
{"level":"info","ts":"2026-07-06T14:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed1eab363dd4d3c75430714abfe2010dcdbf44949bbc31a5862d44633c4476b5"}
{"level":"info","ts":"2026-07-06T14:32:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ae54b92ed55a4053233f52c822456503398ad785956302faab7078695de54e01"}