--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419"}
{"level":"debug","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:45Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:45Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9205a50fd8e0bd1867b9e9559a72ab83e647fa5b3f7e32e86b0723e31d9f1ef2"}
{"level":"info","ts":"2026-07-06T23:20:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"info","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:20:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:20:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"info","ts":"2026-07-06T23:21:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fc67160ddf499ae368db24f4950fd413f3b2fdadf0577a756705efb38145d419"}
{"level":"info","ts":"2026-07-06T23:21:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9205a50fd8e0bd1867b9e9559a72ab83e647fa5b3f7e32e86b0723e31d9f1ef2"}
{"level":"info","ts":"2026-07-06T23:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b7e66dba309408e38b0f9a74dc5ece8e91efc0614305c2d402fdb60e50894f"}
{"level":"info","ts":"2026-07-06T23:21:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/170b29fcdb147d5b9da3ca6f3a8fe045970ac0ebbd184837f9b6b57cf4b7b93a"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411"}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c"}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:07Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"}
{"level":"info","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4"}
{"level":"debug","ts":"2026-07-06T23:23:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"debug","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9"}
{"level":"info","ts":"2026-07-06T23:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:23:13Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:23:13Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380194,"nanos":846308603},"http":{"id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e7fbd348-8505-4c42-8e8d-4a2d038dae08","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33272","PortSpecifier":{"PortValue":33272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380194,"nanos":902853604},"http":{"id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41c6283-f592-9a98-bbdf-8c5ebe9b9888","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58324","PortSpecifier":{"PortValue":58324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","method":"GET","path":"/maas-api/v1/api-keys/5fdb808d-3b71-456d-8de0-f51520ef154b","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58324","PortSpecifier":{"PortValue":58324}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380194,"nanos":989896078},"http":{"id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","method":"GET","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5fdb808d-3b71-456d-8de0-f51520ef154b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/5fdb808d-3b71-456d-8de0-f51520ef154b",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"191495ef-5f75-4dd8-a9f4-7d92da062e58","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33284","PortSpecifier":{"PortValue":33284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","method":"GET","path":"/maas-api/v1/api-keys/08acd782-b7c9-47ca-93e4-b3d7cead53a7","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:33284","PortSpecifier":{"PortValue":33284}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380195,"nanos":27138940},"http":{"id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","method":"GET","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/08acd782-b7c9-47ca-93e4-b3d7cead53a7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/08acd782-b7c9-47ca-93e4-b3d7cead53a7",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9f5da71-f376-46e2-9dd2-d9f7e72f4bcf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f6a198db-cc1f-457f-8566-e46b01b63726","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35048","PortSpecifier":{"PortValue":35048}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380209,"nanos":938855481},"http":{"id":"f6a198db-cc1f-457f-8566-e46b01b63726","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f6a198db-cc1f-457f-8566-e46b01b63726","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37716","PortSpecifier":{"PortValue":37716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37716","PortSpecifier":{"PortValue":37716}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380209,"nanos":979395204},"http":{"id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:29Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6e26d1b0-1052-46e0-828e-e55ed0e3748f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8655ee35-02da-447a-8af7-81882a91531e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35056","PortSpecifier":{"PortValue":35056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8655ee35-02da-447a-8af7-81882a91531e","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8655ee35-02da-447a-8af7-81882a91531e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35056","PortSpecifier":{"PortValue":35056}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380210,"nanos":21007784},"http":{"id":"8655ee35-02da-447a-8af7-81882a91531e","method":"GET","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LcD4v7wsTi7bcNxQ_OfSgC4odu1qKuNLJrkEz7vE9Ps1P7HnlLzuZoJ3LyPq"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LcD4v7wsTi7bcNxQ_OfSgC4odu1qKuNLJrkEz7vE9Ps1P7HnlLzuZoJ3LyPq\"}"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d272f977-d86a-4654-9f27-4d32a5e01ad5","keyName":"e2e-auth-iso-a-1318f9","subscription":"e2e-auth-iso-6a55da","tenant":"e2e-shared-a-2cc96a","userId":"d272f977-d86a-4654-9f27-4d32a5e01ad5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8655ee35-02da-447a-8af7-81882a91531e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-6a55da"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8655ee35-02da-447a-8af7-81882a91531e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8655ee35-02da-447a-8af7-81882a91531e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8655ee35-02da-447a-8af7-81882a91531e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54104","PortSpecifier":{"PortValue":54104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54104","PortSpecifier":{"PortValue":54104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380227,"nanos":25703955},"http":{"id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f8a91b67-3861-4422-8cc5-feedac7d4f59","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48150","PortSpecifier":{"PortValue":48150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48150","PortSpecifier":{"PortValue":48150}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380227,"nanos":69352664},"http":{"id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"48f77fd5-ff8c-4b03-9c2e-70fac12ea81f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48154","PortSpecifier":{"PortValue":48154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a8a395a9-af45-4f33-8599-1099af4605a1","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48154","PortSpecifier":{"PortValue":48154}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380227,"nanos":113465705},"http":{"id":"a8a395a9-af45-4f33-8599-1099af4605a1","method":"GET","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-qDN9kQzteUrjelqG_MRTjoRQH7RInQSBVTPK0oFJbYBh3WMo6deMxz0oJD49"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-qDN9kQzteUrjelqG_MRTjoRQH7RInQSBVTPK0oFJbYBh3WMo6deMxz0oJD49\"}"}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-06T23:23:47Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a8a395a9-af45-4f33-8599-1099af4605a1","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57266","PortSpecifier":{"PortValue":57266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57266","PortSpecifier":{"PortValue":57266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380244,"nanos":204636085},"http":{"id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f0b6db24-02b8-4d0e-8587-c3eb0a0665ab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38838","PortSpecifier":{"PortValue":38838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38838","PortSpecifier":{"PortValue":38838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380244,"nanos":240355324},"http":{"id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d10fe8d-555a-4d92-8e15-5223bd5d4177","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57268","PortSpecifier":{"PortValue":57268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57268","PortSpecifier":{"PortValue":57268}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380244,"nanos":276324568},"http":{"id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e84f90e9-46be-4e84-8f71-0bd6fa3240af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38840","PortSpecifier":{"PortValue":38840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e74fb743-04d5-452f-9033-d70ac6919c57","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38840","PortSpecifier":{"PortValue":38840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380244,"nanos":308441348},"http":{"id":"e74fb743-04d5-452f-9033-d70ac6919c57","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e74fb743-04d5-452f-9033-d70ac6919c57","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60768","PortSpecifier":{"PortValue":60768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60768","PortSpecifier":{"PortValue":60768}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380261,"nanos":374779042},"http":{"id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"46818279-90d4-4ce1-bd6f-abfbb0f4cc5e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e683e184-386d-4284-8188-b2612e14b6c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e683e184-386d-4284-8188-b2612e14b6c9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e683e184-386d-4284-8188-b2612e14b6c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57468","PortSpecifier":{"PortValue":57468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380261,"nanos":409158949},"http":{"id":"e683e184-386d-4284-8188-b2612e14b6c9","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e683e184-386d-4284-8188-b2612e14b6c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e683e184-386d-4284-8188-b2612e14b6c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e683e184-386d-4284-8188-b2612e14b6c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e683e184-386d-4284-8188-b2612e14b6c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e683e184-386d-4284-8188-b2612e14b6c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b583375-9df9-4238-b45a-017d1ad27738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57474","PortSpecifier":{"PortValue":57474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6b583375-9df9-4238-b45a-017d1ad27738","method":"GET","path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6b583375-9df9-4238-b45a-017d1ad27738","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:57474","PortSpecifier":{"PortValue":57474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380261,"nanos":447821717},"http":{"id":"6b583375-9df9-4238-b45a-017d1ad27738","method":"GET","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6b583375-9df9-4238-b45a-017d1ad27738","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6b583375-9df9-4238-b45a-017d1ad27738","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6b583375-9df9-4238-b45a-017d1ad27738","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b583375-9df9-4238-b45a-017d1ad27738","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6b583375-9df9-4238-b45a-017d1ad27738","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60784","PortSpecifier":{"PortValue":60784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","method":"GET","path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60784","PortSpecifier":{"PortValue":60784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380261,"nanos":478178133},"http":{"id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","method":"GET","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/f2bf9d2e-8044-4e54-ba35-ef3a1039f3b1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4b2ff835-4b6e-44f5-8aab-e5ac02281a79","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45190","PortSpecifier":{"PortValue":45190}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380279,"nanos":375715132},"http":{"id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6867a35e-421e-4673-9f11-eb33f4eb22ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52470","PortSpecifier":{"PortValue":52470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380279,"nanos":405579401},"http":{"id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/auth-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e75e041e-f188-4240-bfbe-bbcc4c6c1c10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:45192","PortSpecifier":{"PortValue":45192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380279,"nanos":441088960},"http":{"id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-rtKo1BN5B2zM0EET_9SwYEhWR3Xx754rIuVyGehaWtePAdTCpb9gZ13HVbyI"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-rtKo1BN5B2zM0EET_9SwYEhWR3Xx754rIuVyGehaWtePAdTCpb9gZ13HVbyI\"}"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"61b6925c-7958-4343-8c5e-cbcf99e8cd50","keyName":"e2e-auth-iso-a-717380","subscription":"e2e-auth-iso-7594ce","tenant":"e2e-shared-a-2cc96a","userId":"61b6925c-7958-4343-8c5e-cbcf99e8cd50","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/auth-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-7594ce"}
{"level":"info","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:24:39Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6ed4c2cb-ce09-432d-a7cf-5409c1ef8b6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5f4456a7f6ab99a2103c5f3ee5e50caa49e03a516fec65a7023ee1b4e1635307"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/23cc8d4b4433fbc097492f48e842c69dee372c7c7b357d0ade5315f018cbe9ab"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fea798c0d621e2efdd81c18d5389ee36fac7d43cb762fb3ceea0d3c2bb0a4ce"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed6058be6300a0d27e9d85ec71466bac77883d6deb33a8f0a8de5c9471c766da"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4b8ccc636876ec1758dd4ffa526441916238a795541383b7ea07a33ca5822ca2"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fe1b4304fe6fbfba3a00b6b90bcf8d48761b3f6988b2b111a7137bcff22c411"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b582729317513afb9d4ff52643f16b0266635d3febc8037eb558e5ac3ef00406"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0ec61d17ec626e2deeec307661c6bd95ad51060e74fe56ce60abf3787dc03cd"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3b7ce34b8ba9cb63ca156508af278179c25df6f27016903ba7af32ffaaa36e17"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/34ce209fe45950412e739ab1122849ffc2beb576a131524d4b111933c85106f4"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a7291524259740d35361d85b47e7c323fd396972585f3b66257c7fab7fa27a9"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9641ff86431635f3c0cbcad864f65624f547ac599689ceedcca1bdf115c26b8c"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/feaf35f6fe6066738516c799136afdd73c6872094138f894bc87ade4197654ab"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed149a09530acf8a4e0fd80956a6a2afde433ab8f083fe7c13de13477948cd6c"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7991c698ffaea607c738b8ff4c7449e74a70a089d58308c778f822d988a95c57"}
{"level":"info","ts":"2026-07-06T23:24:45Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2df23c19258b0229c362fecd24656a3b2f57fbdd8c0a7d9543bd22493c9da606"}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:24:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:24:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"error","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"error","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"debug","ts":"2026-07-06T23:25:19Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:19Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"error","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"info","ts":"2026-07-06T23:25:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:25:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:25:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"info","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42504","PortSpecifier":{"PortValue":42504}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380341,"nanos":948102057},"http":{"id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/sub-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b92c07c-aa96-4a8f-ac78-19c9e2f19d76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36184","PortSpecifier":{"PortValue":36184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36184","PortSpecifier":{"PortValue":36184}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380341,"nanos":983307865},"http":{"id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/sub-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"36fb9708-a003-4de5-88d4-a7c05daf86f6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42520","PortSpecifier":{"PortValue":42520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42520","PortSpecifier":{"PortValue":42520}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380342,"nanos":22344537},"http":{"id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","method":"GET","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1QE9K7EBAiPIRExwA_D1Ipm4q4Yj3qAbYtfqzMcyTxrbH4m0bXOoR6C2I3fnp"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1QE9K7EBAiPIRExwA_D1Ipm4q4Yj3qAbYtfqzMcyTxrbH4m0bXOoR6C2I3fnp\"}"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fbd33efa-8558-4114-8ae4-8fdb0f5778f5","keyName":"e2e-sub-iso-ad2091","subscription":"e2e-a-only-e26375","tenant":"e2e-shared-a-2cc96a","userId":"fbd33efa-8558-4114-8ae4-8fdb0f5778f5","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/sub-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-e26375"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d7bfd5e0-b592-4a25-a371-dbdaeef8c5af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36192","PortSpecifier":{"PortValue":36192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ab39270b-fa52-412f-a472-d10bb1be83fc","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36192","PortSpecifier":{"PortValue":36192}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380342,"nanos":60887332},"http":{"id":"ab39270b-fa52-412f-a472-d10bb1be83fc","method":"GET","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-wBmRH29savgTMLLQ_5SBOHWyoK8BySUF4kMQGYZuGbbX5NGSUmK8YAGUYG8D"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-wBmRH29savgTMLLQ_5SBOHWyoK8BySUF4kMQGYZuGbbX5NGSUmK8YAGUYG8D\"}"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"529ad703-bce7-4674-ac28-2ac899b8605e","keyName":"e2e-sub-iso-37aff0","subscription":"e2e-b-only-e26375","tenant":"e2e-shared-b-ca352b","userId":"529ad703-bce7-4674-ac28-2ac899b8605e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/sub-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-e26375"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ab39270b-fa52-412f-a472-d10bb1be83fc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48376","PortSpecifier":{"PortValue":48376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48376","PortSpecifier":{"PortValue":48376}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380349,"nanos":919978442},"http":{"id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/sub-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1b05b1a0-7a8d-4fdb-a5e3-08216ebf3f80","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55256","PortSpecifier":{"PortValue":55256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55256","PortSpecifier":{"PortValue":55256}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380349,"nanos":949612094},"http":{"id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/sub-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"082a18c5-2451-4cab-8814-7e8d7f24a7af","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48384","PortSpecifier":{"PortValue":48384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48384","PortSpecifier":{"PortValue":48384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380349,"nanos":983946350},"http":{"id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-AMt2Mps4y2dKKQ4A_hhekPJEIph0nibCP2oHBYRNiNvqzRZRYX4ph7PXZ8MC"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-AMt2Mps4y2dKKQ4A_hhekPJEIph0nibCP2oHBYRNiNvqzRZRYX4ph7PXZ8MC\"}"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"620efae9-dd17-42d2-9f56-92d560ddbbc9","keyName":"e2e-sub-iso-30b1b7","subscription":"e2e-shared-sub-d4d79f","tenant":"e2e-shared-a-2cc96a","userId":"620efae9-dd17-42d2-9f56-92d560ddbbc9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/sub-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d4d79f"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e3d3eafc-e1c2-4850-ae2e-d0788fd18be6","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55272","PortSpecifier":{"PortValue":55272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55272","PortSpecifier":{"PortValue":55272}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380350,"nanos":7301607},"http":{"id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-C2uz5Kd5lrR7NTIV_il30SeyW74Jculx9OQ7lswr2v02oK4Z2VlphqZ33fty"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-C2uz5Kd5lrR7NTIV_il30SeyW74Jculx9OQ7lswr2v02oK4Z2VlphqZ33fty\"}"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d3f78629-34bc-4e99-819f-abdcbb290dc9","keyName":"e2e-sub-iso-e4da63","subscription":"e2e-shared-sub-d4d79f","tenant":"e2e-shared-b-ca352b","userId":"d3f78629-34bc-4e99-819f-abdcbb290dc9","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/sub-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-d4d79f"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:25:50Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"12cc1dce-b3b2-4064-ba54-2f165e96cbab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de6b14950d34f27928cb983b87542cf854faadc738333e967826f9b8f16b6e4a"}
{"level":"info","ts":"2026-07-06T23:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31a4abcab58cd99e7ba40c2ec2e33939c90e70065003fa76fc7d51d184c0b7a8"}
{"level":"info","ts":"2026-07-06T23:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fff3502bee8731b0250bcb134a0395fe3e94a6774b507e2313b410b80af0bc77"}
{"level":"info","ts":"2026-07-06T23:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9326f200e7559ee68563cfabd8baf8f922fa5ae650e62a3be2b255d84fdd47c1"}
{"level":"info","ts":"2026-07-06T23:25:55Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e907bcba81efc276c2f657155291cd6f73900d40563926002112185705afc790"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8a643a8154bfdb79a39c694d4ca254d46ea2c8cb91c9e3fbe28fbde4d0cfaea"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/acb21d3b9e70a97a6acf4db050252945f659c2f819a40834e3b6eeb2cfc867a1"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e80c811eaa0d24c8282fb8807b711c22f9223ec6823aaed96762db2d0d3dadb0"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5ce1a91522e839b9ad627883b3a4ecb0a26363ec58e679fbca0351119cf04d2a"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4199a497ccf7db2c154e2be5210f18548f90e5aebe4c723d809862671cd85e18"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8b02f97cb6334d885d9a904183c034a99cc1bb4c182dab484770368cf433ef62"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5304afb8fe0ae395cdb5b6418f797634f2b99c583ed3f32f43c28d9a480c6646"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c699fa67728333848f0c3f8c4c1ece342f044286d1e0ac5abb3693b3ce6b812d"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24325f7b1d6a1bd93883dd4b1d73a420a611c737c3b96ee7d7e3fda163933904"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c815d41c0577f3bfd4792341a037a5e4a20dc4ef744f7162d3e22461a3765d5c"}
{"level":"info","ts":"2026-07-06T23:25:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/de787783093958e0fc7813793e31d1f4bcce7605dad64cc56db2ced76a85dcb6"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"error","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:26:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:40Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:40Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"error","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:41Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:41Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:26:59Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:26:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-06T23:27:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"debug","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-06T23:27:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-06T23:27:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-06T23:27:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40294","PortSpecifier":{"PortValue":40294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40294","PortSpecifier":{"PortValue":40294}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":650665114},"http":{"id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8db8129b-4a71-4cb3-beb0-3474d7e6942e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42068","PortSpecifier":{"PortValue":42068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e04c5e32-011f-4caf-8938-52ea269c4653","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42068","PortSpecifier":{"PortValue":42068}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":698390427},"http":{"id":"e04c5e32-011f-4caf-8938-52ea269c4653","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e04c5e32-011f-4caf-8938-52ea269c4653","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40306","PortSpecifier":{"PortValue":40306}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380422,"nanos":757678649},"http":{"id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:02Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1513351c-46d3-46ea-9fb5-ecbac82131b9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40322","PortSpecifier":{"PortValue":40322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40322","PortSpecifier":{"PortValue":40322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380423,"nanos":816655762},"http":{"id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:03Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"4e27a3be-69a2-44e8-8c35-1dab07f87caf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:40336","PortSpecifier":{"PortValue":40336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380424,"nanos":855663659},"http":{"id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-17fsWxqjl1AIp8HED_LDACZm9mIXyi4ao2gpapjTzTIes4zOUK99BAYLaDnyE\"}"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","subscription":"e2e-rate-iso-a-dfd788","tenant":"e2e-shared-a-2cc96a","userId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-dfd788\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-dfd788"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"4c9a215e-972d-401c-ad90-c69f3fb4beb1","keyName":"e2e-rate-a-dfd788","selected_subscription":"e2e-rate-iso-a-dfd788","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-dfd788@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-dfd788","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:04Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"9ca4b3f8-910c-4b6d-94d1-c9527e7301ff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49448","PortSpecifier":{"PortValue":49448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49448","PortSpecifier":{"PortValue":49448}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":642813760},"http":{"id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.69:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"87b85d30-429d-4b2a-ba58-0efd5ee3036a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54468","PortSpecifier":{"PortValue":54468}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":681021955},"http":{"id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"]}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/7fce89e884b1"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc9db118-8407-4e4c-a769-53423fdb8e52"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"ea50c573-e5c7-4599-8647-dcb84a0bc1a1","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.70:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8ed883cb-2e86-45a0-80a7-eb96fc9be6cc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49458","PortSpecifier":{"PortValue":49458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380437,"nanos":718916375},"http":{"id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13ac2da8-48c4-44b0-8923-a4e5caddd10e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49464","PortSpecifier":{"PortValue":49464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49464","PortSpecifier":{"PortValue":49464}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380438,"nanos":752613918},"http":{"id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c88e208e-9eb1-4d9b-bdf6-ae76e8126c84","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f3e7b123-e372-460c-aed9-f3aeba10e540","method":"POST","path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions","host":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49476","PortSpecifier":{"PortValue":49476}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.69:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380439,"nanos":788500100},"http":{"id":"f3e7b123-e372-460c-aed9-f3aeba10e540","method":"POST","headers":{":authority":"e2e-shared-a-2cc96a.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1YoA4Wa7uCLstnJAJ_tMzOfvi1EOmCTmp3mbP7sU1ty9sLF4mqzvkrOUdv44P\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","subscription":"e2e-rate-iso-a-11e59e","tenant":"e2e-shared-a-2cc96a","userId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\",\"requestedSubscription\":\"e2e-rate-iso-a-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-2cc96a.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"66101a36-8a88-4c0f-83ee-1d07d0f2da88","keyName":"e2e-rate-a-11e59e","selected_subscription":"e2e-rate-iso-a-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-a-2cc96a/e2e-rate-iso-a-11e59e@ai-tenant-e2e-shared-a-2cc96a/rate-test-model-2cc96a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-2cc96a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-11e59e","namespace":"ai-tenant-e2e-shared-a-2cc96a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f3e7b123-e372-460c-aed9-f3aeba10e540","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","method":"POST","path":"/ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b/v1/completions","host":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:54470","PortSpecifier":{"PortValue":54470}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.70:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783380439,"nanos":821614977},"http":{"id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","method":"POST","headers":{":authority":"e2e-shared-b-ca352b.apps.eac73ae5-f90c-42bd-9d4e-7fce89e884b1.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-sfYdZ3w0AzzBmES2_r0BKMJeXLB424DoHgSF6yBhz02wuvwQITUjLXzVNarB"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-sfYdZ3w0AzzBmES2_r0BKMJeXLB424DoHgSF6yBhz02wuvwQITUjLXzVNarB\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d4b65989-a020-4326-a523-242cc3ecc5c6","keyName":"e2e-rate-b-11e59e","subscription":"e2e-rate-iso-b-11e59e","tenant":"e2e-shared-b-ca352b","userId":"d4b65989-a020-4326-a523-242cc3ecc5c6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\",\"requestedSubscription\":\"e2e-rate-iso-b-11e59e\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-ca352b.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-ca352b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11e59e","namespace":"ai-tenant-e2e-shared-b-ca352b","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-11e59e"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"d4b65989-a020-4326-a523-242cc3ecc5c6","keyName":"e2e-rate-b-11e59e","selected_subscription":"e2e-rate-iso-b-11e59e","selected_subscription_key":"ai-tenant-e2e-shared-b-ca352b/e2e-rate-iso-b-11e59e@ai-tenant-e2e-shared-b-ca352b/rate-test-model-ca352b","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-ca352b","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-11e59e","namespace":"ai-tenant-e2e-shared-b-ca352b","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-06T23:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0698b60d-1d2d-4dfa-9ac8-6c43679af1fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5dbfb06eac32bc0f999c0bb04b104bc835fbd2a0d2bc741006bbcab147ed17bf"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a7b2b8208cc870c96e2443935fe4f88de205d9cf8fe74a8cb43280cd74e4a54a"}
{"level":"info","ts":"2026-07-06T23:27:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/530f296ef66825043bb1eeaef28a8ad2a491bf0f68d48c4a99974ff0d1256276"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c0acb19ff01e719f6241a998039c3b7534614245b045cb5ee32facd5a726c54"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ccae30475beb17b489794d95500315c9d16b9ceb2892554faf20697b67226ce0"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/354e0661a66be560b2489dd431c8aaebb841da92ede34e8c37d4e4bad38643ba"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e3e4f72d7766a1d6dc3f80109d4c990cd094cf0572ba7a76798fcfa407d5e273"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a9ebea13457426d8fdda350eb63ecec236fe70ca5d4adbb93cb6a24ea5e9b59e"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a8d3c0f57f5511349291dda2a2d81cf8e280f2f164b9a28f6ec6bad50558128f"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/63c3dcb0ff5025e077985cdd615ee23e9f0ff5bd4c7d15b556b0d39f20d24b47"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc6e0b5fb4b52b9fe5f5ec86a3e2968392988962ef6fde0833dab1695c6c43cf"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672f4f6e1194f55e1082f3e170177553e483e6a3f578af029608fafa10d6c742"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc42961afb884a036a5828376c06bb6621ab87198d9807ff615afad5072b58f9"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/72319fa31e7fcaf87d6975298e5ad9667bb09b343bd51b7813e589f587cce505"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1ac2333ba3dd13988475b77a612da3d5072710c08bc7bec57d21094b3bf4a183"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/31b2b269bb8b1aa3c1f8c77a214a1d1d4af8b867fc819493461641cf2d658c96"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/87e5faad2617844bebf0369208afb0bfa0d972042e70790b269e5807a89bbf18"}
{"level":"info","ts":"2026-07-06T23:27:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17921d63e70587fa6181b0172a3c1d0034b536c027df1e2720315866a6a92943"}
{"level":"info","ts":"2026-07-06T23:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6f4a9facb2137f5ace2529036c236a48d820a651787dc17f6a1a0e20549704ff"}
{"level":"info","ts":"2026-07-06T23:27:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/08cdf5b8d91e4d7cfe91824747046638d7941ff2424040bc6045a6c8d18fbd9c"}