--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"}
{"level":"error","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"error","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2"}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2"}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2"}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"debug","ts":"2026-07-16T23:25:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"error","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"002303e0-a258-4294-8f0f-746c74637f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55000","PortSpecifier":{"PortValue":55000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"002303e0-a258-4294-8f0f-746c74637f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"002303e0-a258-4294-8f0f-746c74637f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55000","PortSpecifier":{"PortValue":55000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244334,"nanos":113933741},"http":{"id":"002303e0-a258-4294-8f0f-746c74637f85","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"002303e0-a258-4294-8f0f-746c74637f85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"002303e0-a258-4294-8f0f-746c74637f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"002303e0-a258-4294-8f0f-746c74637f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"002303e0-a258-4294-8f0f-746c74637f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"002303e0-a258-4294-8f0f-746c74637f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60668","PortSpecifier":{"PortValue":60668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c810ce12-e839-48eb-9d60-35b1de6c386e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60668","PortSpecifier":{"PortValue":60668}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244334,"nanos":178222984},"http":{"id":"c810ce12-e839-48eb-9d60-35b1de6c386e","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c810ce12-e839-48eb-9d60-35b1de6c386e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55010","PortSpecifier":{"PortValue":55010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","method":"GET","path":"/maas-api/v1/api-keys/102dd95f-d392-4ed7-802c-5a8eecef6754","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:55010","PortSpecifier":{"PortValue":55010}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244334,"nanos":235583999},"http":{"id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","method":"GET","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/102dd95f-d392-4ed7-802c-5a8eecef6754",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/102dd95f-d392-4ed7-802c-5a8eecef6754",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"604cd2e2-c7c8-49c4-ad1f-62e78602538a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60670","PortSpecifier":{"PortValue":60670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","method":"GET","path":"/maas-api/v1/api-keys/60785e78-107b-49b0-8449-c0b14b4d16ea","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60670","PortSpecifier":{"PortValue":60670}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244334,"nanos":275596047},"http":{"id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","method":"GET","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60785e78-107b-49b0-8449-c0b14b4d16ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/60785e78-107b-49b0-8449-c0b14b4d16ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3ad96bd4-a030-49f4-a454-2b1c4a7e02a0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41288","PortSpecifier":{"PortValue":41288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ad48c181-dd55-4822-b50b-3cf37703aff4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41288","PortSpecifier":{"PortValue":41288}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244353,"nanos":415224265},"http":{"id":"ad48c181-dd55-4822-b50b-3cf37703aff4","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ad48c181-dd55-4822-b50b-3cf37703aff4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54196","PortSpecifier":{"PortValue":54196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54196","PortSpecifier":{"PortValue":54196}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244353,"nanos":454206624},"http":{"id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9a2640ae-4ebf-4f11-bf97-8b44b50802b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41290","PortSpecifier":{"PortValue":41290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:41290","PortSpecifier":{"PortValue":41290}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244353,"nanos":486911410},"http":{"id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","method":"GET","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-RSY63qRJPp5DY2BZ_VrnGJVeHbfjTaVxbfkIQHtvExamGXQfzeKCXo2kFA8L"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-RSY63qRJPp5DY2BZ_VrnGJVeHbfjTaVxbfkIQHtvExamGXQfzeKCXo2kFA8L\"}"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"9f776df2-8d20-434e-95c4-b5ce919a1620","keyName":"e2e-auth-iso-a-79a8cc","subscription":"e2e-auth-iso-4cb41c","tenant":"e2e-shared-a-48992b","userId":"9f776df2-8d20-434e-95c4-b5ce919a1620","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-4cb41c"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:25:53Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e9907187-49fe-4190-9a6b-dcbde1de12b6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51438","PortSpecifier":{"PortValue":51438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:51438","PortSpecifier":{"PortValue":51438}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244372,"nanos":623339324},"http":{"id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0789cb54-083f-4eb3-af1a-3ac112e538d2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb569490-1bd8-476e-807b-b18a284589f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"cb569490-1bd8-476e-807b-b18a284589f5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"cb569490-1bd8-476e-807b-b18a284589f5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42854","PortSpecifier":{"PortValue":42854}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244372,"nanos":665387467},"http":{"id":"cb569490-1bd8-476e-807b-b18a284589f5","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"cb569490-1bd8-476e-807b-b18a284589f5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"cb569490-1bd8-476e-807b-b18a284589f5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"cb569490-1bd8-476e-807b-b18a284589f5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb569490-1bd8-476e-807b-b18a284589f5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"cb569490-1bd8-476e-807b-b18a284589f5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42862","PortSpecifier":{"PortValue":42862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9663c465-1aae-411d-94bd-63fed758c1e4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42862","PortSpecifier":{"PortValue":42862}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244372,"nanos":707507580},"http":{"id":"9663c465-1aae-411d-94bd-63fed758c1e4","method":"GET","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sS6VFwC3iDsxO4e2_3e8sBxARaYxbWbgkJOX2A37dLmT5msvdOAszOf1z0Du"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sS6VFwC3iDsxO4e2_3e8sBxARaYxbWbgkJOX2A37dLmT5msvdOAszOf1z0Du\"}"}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-16T23:26:12Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9663c465-1aae-411d-94bd-63fed758c1e4","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50916","PortSpecifier":{"PortValue":50916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50916","PortSpecifier":{"PortValue":50916}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244391,"nanos":868583780},"http":{"id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4d6dbef6-fe74-4681-9b2e-45dd004620a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"40b4326c-19ff-490c-8935-0c71e673c2cb","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49506","PortSpecifier":{"PortValue":49506}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244391,"nanos":924016666},"http":{"id":"40b4326c-19ff-490c-8935-0c71e673c2cb","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"40b4326c-19ff-490c-8935-0c71e673c2cb","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50926","PortSpecifier":{"PortValue":50926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:50926","PortSpecifier":{"PortValue":50926}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244391,"nanos":979786326},"http":{"id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"880fc4ab-b431-4e0e-920a-e864fe1bf160","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:49512","PortSpecifier":{"PortValue":49512}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244392,"nanos":19783595},"http":{"id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3f57048e-69d4-4b04-a56e-1c82b7e698db","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2629f610-4357-47c2-99dd-d70fed539079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54176","PortSpecifier":{"PortValue":54176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2629f610-4357-47c2-99dd-d70fed539079","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2629f610-4357-47c2-99dd-d70fed539079","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54176","PortSpecifier":{"PortValue":54176}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244411,"nanos":130203256},"http":{"id":"2629f610-4357-47c2-99dd-d70fed539079","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2629f610-4357-47c2-99dd-d70fed539079","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2629f610-4357-47c2-99dd-d70fed539079","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2629f610-4357-47c2-99dd-d70fed539079","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2629f610-4357-47c2-99dd-d70fed539079","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2629f610-4357-47c2-99dd-d70fed539079","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60332","PortSpecifier":{"PortValue":60332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60332","PortSpecifier":{"PortValue":60332}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244411,"nanos":164457371},"http":{"id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7e0e28e7-4d6e-47ae-9d74-5914fa11e429","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60348","PortSpecifier":{"PortValue":60348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","method":"GET","path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:60348","PortSpecifier":{"PortValue":60348}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244411,"nanos":195150595},"http":{"id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","method":"GET","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b8be7231-def0-4071-83aa-e7882f4a1bb5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54192","PortSpecifier":{"PortValue":54192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e691b5b1-44f4-4753-97a2-956f21fec132","method":"GET","path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:54192","PortSpecifier":{"PortValue":54192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244411,"nanos":227499488},"http":{"id":"e691b5b1-44f4-4753-97a2-956f21fec132","method":"GET","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/9899069a-b9cc-4c03-87f4-c6eea7aa41fc",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:26:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e691b5b1-44f4-4753-97a2-956f21fec132","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43212","PortSpecifier":{"PortValue":43212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43212","PortSpecifier":{"PortValue":43212}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244430,"nanos":295517507},"http":{"id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ff597db-9c35-4cbc-ac96-2b4fc98e1809","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37936","PortSpecifier":{"PortValue":37936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:37936","PortSpecifier":{"PortValue":37936}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244430,"nanos":327628983},"http":{"id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/auth-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5a5d8720-3d2a-485b-9884-3ee3b0dc3a27","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43228","PortSpecifier":{"PortValue":43228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"29f22557-d994-4685-aff1-ed7ce892f9f9","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:43228","PortSpecifier":{"PortValue":43228}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244430,"nanos":373114939},"http":{"id":"29f22557-d994-4685-aff1-ed7ce892f9f9","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-V9KiI2qbGFw9iniM_MB34DVmqhW3uhXu9552dtp60vUKxASn5FrKGPyU9RV7"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-V9KiI2qbGFw9iniM_MB34DVmqhW3uhXu9552dtp60vUKxASn5FrKGPyU9RV7\"}"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"67bc5ec1-f502-4326-ab51-a2beb1fa2e9e","keyName":"e2e-auth-iso-a-7466f6","subscription":"e2e-auth-iso-bc5cf6","tenant":"e2e-shared-a-48992b","userId":"67bc5ec1-f502-4326-ab51-a2beb1fa2e9e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/auth-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-bc5cf6"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:27:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"29f22557-d994-4685-aff1-ed7ce892f9f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/15c6f6dc38e1183c31aa998bb19a1e3ec11410db48ae9d333d40a17f225414e8"}
{"level":"info","ts":"2026-07-16T23:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/14ac4095f707902251e55650e49c096befa428cc0d4f4788c5efb89ac7be139a"}
{"level":"info","ts":"2026-07-16T23:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a240121ea5650ee9d8eb5ecebfbfd0a2398789286d54a6c7115322339cae21a2"}
{"level":"info","ts":"2026-07-16T23:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56a79637cce7d5bd1b904db57c5b14e4c4d6b1dc16eb7e102874f6b2a47597f8"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2232790c7e5a239a87593f36be5a684d0904a3e51bd53dca3c02c4cf1bd79621"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/931cb0fdd244f65c8c086489f7fac4834c912146d28b3a6990ca0e122a9e15ac"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2015a923e2120cba46bd2105f69afb5bb790c0a752aeafef9652c161d69e1621"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/49b80a81ee9e0beb70275eaaca2fdaee7368da710c6c7e7a60c2862d7b4f1dc6"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/312889564c764c6b641da345af5c8e86c088bbae663f93e8a10050cde86d3040"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5916349529fbaa8681f2769937805473cb9d7d4996d908d7940bc6fda923b31"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/045818faa6e1895a525c4699f054224b5216e933990b24116a002f0c02f4d8f0"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77e96b155e4b0d8f1123d43de7678741e915cc6b7fb0ea38b4a0dcffefe24a21"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8e72368bd0a326fc9448497401b347eb8af37176b115b173d60a724acd6c59df"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a21a86951b2344500e34372626f1bf76fb213c59ae21cddd078e5edbd8fe93fd"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5057e4a61959146c9ea486973d550f0ece365575558e6990474fefed90ebab4"}
{"level":"info","ts":"2026-07-16T23:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/44c23444a34b8b22c2d7189525808d0d16a737900d5374e5ff18b7b2a847bec2"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:28Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"error","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:27:29Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:27:29Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:27:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"error","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"error","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"error","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:28:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"debug","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"debug","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45764","PortSpecifier":{"PortValue":45764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45764","PortSpecifier":{"PortValue":45764}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244504,"nanos":67635228},"http":{"id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/sub-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a51f4601-21ba-4579-9fc4-a035ab9cacc2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244504,"nanos":112504290},"http":{"id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/sub-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"83d48bb3-fc9b-4d98-9266-72c53cef2d6e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38d47407-baa4-40e3-a022-d43560510636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45776","PortSpecifier":{"PortValue":45776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"38d47407-baa4-40e3-a022-d43560510636","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"38d47407-baa4-40e3-a022-d43560510636","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:45776","PortSpecifier":{"PortValue":45776}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244504,"nanos":150203197},"http":{"id":"38d47407-baa4-40e3-a022-d43560510636","method":"GET","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-l1i29vsecGZvrQEO_JqMOA7qUXVwnGuteGzIYofad1YPgcrBc94URi6SLrGq"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"38d47407-baa4-40e3-a022-d43560510636","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-l1i29vsecGZvrQEO_JqMOA7qUXVwnGuteGzIYofad1YPgcrBc94URi6SLrGq\"}"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"64d1dd1e-fa33-496f-b0c1-9972e0163a25","keyName":"e2e-sub-iso-c3aa98","subscription":"e2e-a-only-bb0091","tenant":"e2e-shared-a-48992b","userId":"64d1dd1e-fa33-496f-b0c1-9972e0163a25","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"38d47407-baa4-40e3-a022-d43560510636","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/sub-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-bb0091"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"38d47407-baa4-40e3-a022-d43560510636","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38d47407-baa4-40e3-a022-d43560510636","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"38d47407-baa4-40e3-a022-d43560510636","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42200","PortSpecifier":{"PortValue":42200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42200","PortSpecifier":{"PortValue":42200}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244504,"nanos":188473641},"http":{"id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","method":"GET","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-uDPMmFhHLEsZjH1o_gGMxLFBRO2uaXhjzL2hoDNzOCUIff4DnphoqfnWpB9q"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-uDPMmFhHLEsZjH1o_gGMxLFBRO2uaXhjzL2hoDNzOCUIff4DnphoqfnWpB9q\"}"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72a21cdd-270d-44e7-93a1-e7550c5180d9","keyName":"e2e-sub-iso-ad0e4c","subscription":"e2e-b-only-bb0091","tenant":"e2e-shared-b-b4ab52","userId":"72a21cdd-270d-44e7-93a1-e7550c5180d9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/sub-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-bb0091"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4c3293b0-fe94-4402-9a8b-b31e0593f619","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36226","PortSpecifier":{"PortValue":36226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e878736-dff4-44fb-98fa-a8e11dce0389","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36226","PortSpecifier":{"PortValue":36226}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244514,"nanos":30139160},"http":{"id":"1e878736-dff4-44fb-98fa-a8e11dce0389","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/sub-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e878736-dff4-44fb-98fa-a8e11dce0389","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44856","PortSpecifier":{"PortValue":44856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e10654fb-296d-41f7-b52a-c5687f8be436","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44856","PortSpecifier":{"PortValue":44856}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244514,"nanos":64673291},"http":{"id":"e10654fb-296d-41f7-b52a-c5687f8be436","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/sub-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e10654fb-296d-41f7-b52a-c5687f8be436","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36232","PortSpecifier":{"PortValue":36232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3aedda58-9bbc-4c52-b04b-c73850488e59","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:36232","PortSpecifier":{"PortValue":36232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244514,"nanos":101316083},"http":{"id":"3aedda58-9bbc-4c52-b04b-c73850488e59","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1SUQFGq5N7PzMIMtb_IrkhVaVyijytVsbdcu2NEvqYAew9p5RbZh5RpikL14P"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1SUQFGq5N7PzMIMtb_IrkhVaVyijytVsbdcu2NEvqYAew9p5RbZh5RpikL14P\"}"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f4c7a1ec-60e0-4510-91dd-8a271ef31e11","keyName":"e2e-sub-iso-39fa0d","subscription":"e2e-shared-sub-a6f910","tenant":"e2e-shared-a-48992b","userId":"f4c7a1ec-60e0-4510-91dd-8a271ef31e11","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/sub-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a6f910"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3aedda58-9bbc-4c52-b04b-c73850488e59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44866","PortSpecifier":{"PortValue":44866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3710b2fc-3004-4912-ae66-6cf0cb583658","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44866","PortSpecifier":{"PortValue":44866}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244514,"nanos":130033936},"http":{"id":"3710b2fc-3004-4912-ae66-6cf0cb583658","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-smCRTgc062rqwACt_ZpCEKcg4Ne1B97cTPMmxM9hOp2VyKcHTUBebEPZzaVt"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-smCRTgc062rqwACt_ZpCEKcg4Ne1B97cTPMmxM9hOp2VyKcHTUBebEPZzaVt\"}"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"35e9621b-bbf3-4a6f-804b-03959f79f8a3","keyName":"e2e-sub-iso-7236c2","subscription":"e2e-shared-sub-a6f910","tenant":"e2e-shared-b-b4ab52","userId":"35e9621b-bbf3-4a6f-804b-03959f79f8a3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/sub-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-a6f910"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:28:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3710b2fc-3004-4912-ae66-6cf0cb583658","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4244cdaba5ef1cbc55ca42e512d1dae9c2d0e8888a908bd7fce12b45a5be629f"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77213899f4f79bec4747683c1aa71652ba97a9da3674053dc66e0cf61a62a36b"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e7e94dd517db6a1a514b51486be69f831fca1bbe928ea018467be9b607ae4c5"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4d982fa03d2736aab0290ef094baf706a07128459624547044914deaf27e1a00"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50a44a609217432027a4f85c20b71ba59187b565c0fc031a955ff702ac384bc1"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e62837f314d19f0e0121efd080fbdab039b7b63481109f99f9cfe48d328118af"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a0bba4eb155ec3a8fe4de71f7f0d405e86488a1f17e0cefad83e92ba9b48549a"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c729d5a85ce5a3dbab5770aeebbf41aa90e1f8e7bf691ec9423cc8c4bf2f4bab"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/62815d5673652a9f6f04412bced1abce6a74b0b57278a74d6925cafda3f46075"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a85d70accddf115c038357f02bf6b6af60c024833d2eb8d6b03c9089662f5f7b"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be6447d3268b9bcb29d596f9a1ef3960d7adf3d907294ddb3b44c21ca24fad08"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31384bae13002e80c96632a6755629158af4bd401c0d1a80198113b39d144d50"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/50fa18eb0cd749fe8d77ed5f5d8551ba29735e1440264aff5b94c322dcbb3383"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01504a306b1e0269d08bdc9205219d285cc6c8c22db4680df164a0b7672adadb"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/049c36a05f22c71ae578735b51bfbb0b625e1de59ac31bf5adbf329a314dedc6"}
{"level":"info","ts":"2026-07-16T23:28:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/53f95b60b17716d74188af92ed01d62cc26fd7d183df617d47a01b3e0c5c5807"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"debug","ts":"2026-07-16T23:28:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:48Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:28:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"info","ts":"2026-07-16T23:28:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"error","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"error","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"debug","ts":"2026-07-16T23:29:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-16T23:29:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-16T23:29:26Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-16T23:29:26Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"debug","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:29:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44232","PortSpecifier":{"PortValue":44232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":154874096},"http":{"id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2d5b9d26-2e9c-424a-aeba-796c8d87b765","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33654","PortSpecifier":{"PortValue":33654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:33654","PortSpecifier":{"PortValue":33654}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":190767230},"http":{"id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db34e7c5-ab15-4c4f-a291-bdeccd1f5543","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44244","PortSpecifier":{"PortValue":44244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d29bb27e-f634-44a9-9852-562215ee0037","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44244","PortSpecifier":{"PortValue":44244}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244569,"nanos":227164227},"http":{"id":"d29bb27e-f634-44a9-9852-562215ee0037","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d29bb27e-f634-44a9-9852-562215ee0037","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d29bb27e-f634-44a9-9852-562215ee0037","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29bb27e-f634-44a9-9852-562215ee0037","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d29bb27e-f634-44a9-9852-562215ee0037","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44248","PortSpecifier":{"PortValue":44248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44248","PortSpecifier":{"PortValue":44248}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244570,"nanos":299919359},"http":{"id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"873e3ef7-8f28-4ae6-b7cc-72baf22da58d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44256","PortSpecifier":{"PortValue":44256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:44256","PortSpecifier":{"PortValue":44256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244571,"nanos":354206031},"http":{"id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Xkjfgo3BQlrZYYmO_TnPEvt1q7drghQ4sFh6Uqhi17jGtdAYv8WMo9yAaJfI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","subscription":"e2e-rate-iso-a-ce497f","tenant":"e2e-shared-a-48992b","userId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-ce497f\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-ce497f"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"63e8b3d4-36ad-4524-9ac4-98a88b5797f5","keyName":"e2e-rate-a-ce497f","selected_subscription":"e2e-rate-iso-a-ce497f","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-ce497f@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-ce497f","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"27aafc89-c7ee-4090-99e0-dad61cc3629c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40890","PortSpecifier":{"PortValue":40890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":147768693},"http":{"id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.80:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8faa4d40-d64b-48c1-9457-55223ebd1f12","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35804","PortSpecifier":{"PortValue":35804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3df1e56-ab31-4e95-b98d-2beba723d056","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:35804","PortSpecifier":{"PortValue":35804}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":183699794},"http":{"id":"e3df1e56-ab31-4e95-b98d-2beba723d056","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"]}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1d64657dafc9"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=77b95588-45bd-42e7-b29c-ed81c7759ba6"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"4b7f2b61-0b23-48f9-bd5e-654392c6c3ba","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.82:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3df1e56-ab31-4e95-b98d-2beba723d056","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40896","PortSpecifier":{"PortValue":40896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:40896","PortSpecifier":{"PortValue":40896}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244584,"nanos":218611366},"http":{"id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b77a647c-6bce-4285-b9df-b7f2b117bc39","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42186","PortSpecifier":{"PortValue":42186}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244585,"nanos":258138083},"http":{"id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:45Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5e782f13-d91b-4bd4-bdd6-cb18107b90ad","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","method":"POST","path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions","host":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42190","PortSpecifier":{"PortValue":42190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.80:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244586,"nanos":298714723},"http":{"id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","method":"POST","headers":{":authority":"e2e-shared-a-48992b.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1Ti39LOV2ZCArnmq5_r0XjdbU09cMfIzx5bhzIEyoQ9NHWXAkhY9LlRmhBSuc\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","subscription":"e2e-rate-iso-a-1a398a","tenant":"e2e-shared-a-48992b","userId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\",\"requestedSubscription\":\"e2e-rate-iso-a-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-48992b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-48992b/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"2aa7de12-0e08-47ed-a0eb-eb1940a1c316","keyName":"e2e-rate-a-1a398a","selected_subscription":"e2e-rate-iso-a-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-a-48992b/e2e-rate-iso-a-1a398a@ai-tenant-e2e-shared-a-48992b/rate-test-model-48992b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-48992b","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-1a398a","namespace":"ai-tenant-e2e-shared-a-48992b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1e273e44-b095-412c-a684-5b41c0b2ccc4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42122","PortSpecifier":{"PortValue":42122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c69536e2-f434-4b54-94dd-4795f81ffd70","method":"POST","path":"/ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52/v1/completions","host":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.11:42122","PortSpecifier":{"PortValue":42122}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.82:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784244586,"nanos":330982800},"http":{"id":"c69536e2-f434-4b54-94dd-4795f81ffd70","method":"POST","headers":{":authority":"e2e-shared-b-b4ab52.apps.5b9d0032-1efd-4f2f-8217-1d64657dafc9.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1DYPQ67fUNbTxwlA4_q8eKAnEn82uSYorHjdOf6nfbMCWJY4p1Fiw4RK4AfmI"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1DYPQ67fUNbTxwlA4_q8eKAnEn82uSYorHjdOf6nfbMCWJY4p1Fiw4RK4AfmI\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"72165efb-efc4-4bf4-9601-062f842c1bc6","keyName":"e2e-rate-b-1a398a","subscription":"e2e-rate-iso-b-1a398a","tenant":"e2e-shared-b-b4ab52","userId":"72165efb-efc4-4bf4-9601-062f842c1bc6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\",\"requestedSubscription\":\"e2e-rate-iso-b-1a398a\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-b4ab52.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-b4ab52","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a398a","namespace":"ai-tenant-e2e-shared-b-b4ab52","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-b4ab52/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-1a398a"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"72165efb-efc4-4bf4-9601-062f842c1bc6","keyName":"e2e-rate-b-1a398a","selected_subscription":"e2e-rate-iso-b-1a398a","selected_subscription_key":"ai-tenant-e2e-shared-b-b4ab52/e2e-rate-iso-b-1a398a@ai-tenant-e2e-shared-b-b4ab52/rate-test-model-b4ab52","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-b4ab52","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-1a398a","namespace":"ai-tenant-e2e-shared-b-b4ab52","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-16T23:29:46Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c69536e2-f434-4b54-94dd-4795f81ffd70","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4138e25f16b105420bb2cd0e931fa12c3146c0cb7097b73046537158956607df"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9bccbbecd23c224151d95ea7e109269fe440e32bbc3c3ef1af0618280d1679a4"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9a079af212d3ce0f3a31f2ba0cd6b4ba870edea7b4f623bfab753de7e4d14f1a"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bccc41a9c8a4252630b4ab423f92b3dd1ff863a74791ab54bac6b0bfb171512f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/267547d8d294b1b981c2897b203fbd2d1ef5eadae4bde33e7f1c60ec2869248f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/58a57d5b9eaf4bcca9554a958cbd7d45e42398e339099162a658170ba5da3a2d"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/090ce298fde5b4f35080bd7a82a2be62ce2e50adbba87d074c231dea05ac4078"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/77158a6149845d5351d309ed51db6752403f47a448b0d1d90599bee61bfd0c7f"}
{"level":"info","ts":"2026-07-16T23:29:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/47ad09ac973343d6823bd2bdacb2c66dab49d3313fde196463cbf01e14d5a5f1"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c017c1644ca116bcb7ccdd09c00c4166427d0cf4c977e46d4de1464f3419f1d2"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/650fbfa89e45e7c1978a54b5469a18dac3637270f710fbe8e013016194dd94cd"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be4710ae47075072f8c83d55b9c80a1b94ac9e7dc9f2e9c44ae07ebb54b511f6"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/86f66bc124db4a6f336b8024fb6e7c461447b1d79c4fd1ca453d300955e2884f"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c79f9bbaad0a60b275a3e2b784e984a55e4a281bf3a23dca68f39d1da3a1344a"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/706c5b91e9790be8e764cad6efb4c3dd01f6c7a4e6c9d3b228ae2b7968bc29d8"}
{"level":"info","ts":"2026-07-16T23:29:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b805d99f8b7a35672b37d38af6e97706b923313f4c224b1467e54f57a3267072"}
{"level":"info","ts":"2026-07-16T23:30:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ab7bb1fce5d511db564472aada64c9fe2fda2fdbd3d622e584d7da502e954fe4"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4ffc1bfd21e67a6e94a81814de029d8f6eb34e59a7dff5f4183aafa718a30f5f"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/594c2f2f73084a573cb74fd9d100c3385565e4196890c83ad6b26b3a271b86d6"}
{"level":"info","ts":"2026-07-16T23:30:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d46f66c0126f0801eaf0ce59c41cb70fa85ab2e46b7ef535c49ae4c13533a71"}
{"level":"info","ts":"2026-07-16T23:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ac45b70ea5ba14eab7df499e0f3b41f54e18909c3fd9857eaaba36fe9b42a0c6"}
{"level":"info","ts":"2026-07-16T23:30:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c506e464e499d0136a02b8418d946efb9208e1abfee593030b35b49a93fc4116"}
{"level":"info","ts":"2026-07-16T23:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f27fd9fdb352ea924fe5ec5ead982a4ff6e476eb29b8b93581505a445bad0457"}
{"level":"info","ts":"2026-07-16T23:30:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6eccfb5ce8ee3d8a4a844ab4dd676dfe0f1e69d8d67554f40200c4e3d3845b1a"}