--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5a74cb050d557c1ff6285cbd6fd78e748628795b80c4d9de14f8b9953d745ba8"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e74d6e218537a206924385c8203c3d5d8200f4337463ea2ef928d70ed59b53a"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:49:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089"}
{"level":"error","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac"}
{"level":"info","ts":"2026-07-07T02:49:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa"}
{"level":"info","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47838","PortSpecifier":{"PortValue":47838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"015fd739-791c-41f2-8ffc-1c065ba0075c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47838","PortSpecifier":{"PortValue":47838}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392613,"nanos":550498906},"http":{"id":"015fd739-791c-41f2-8ffc-1c065ba0075c","method":"POST","headers":{":authority":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a33cbc512ee33c04da1973886fddea591fd1e806cc04d3502fccf231d92b100"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-606263/test-model-606263\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:50:13Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"015fd739-791c-41f2-8ffc-1c065ba0075c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","method":"POST","path":"/ai-tenant-e2e-inf-a-606263/test-model-606263/v1/chat/completions","host":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37440","PortSpecifier":{"PortValue":37440}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392617,"nanos":618853366},"http":{"id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","method":"POST","headers":{":authority":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-a-606263/test-model-606263/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GIl1aYhbuvU4r2Iz_nXjPDNvSVgnc2bFUXBfr1sMp3mGxh4WaJqFUi40MMM"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-a-606263.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GIl1aYhbuvU4r2Iz_nXjPDNvSVgnc2bFUXBfr1sMp3mGxh4WaJqFUi40MMM\"}"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-606263.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"db876c7b-06a7-4aff-9144-68dc32d2f201","keyName":"e2e-tenant-inference-606263","subscription":"test-model-606263-sub","tenant":"e2e-inf-a-606263","userId":"db876c7b-06a7-4aff-9144-68dc32d2f201","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-inf-a-606263.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-inf-a-606263/test-model-606263\",\"requestedSubscription\":\"test-model-606263-sub\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-a-606263.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"test-model-606263","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-606263-sub","namespace":"ai-tenant-e2e-inf-a-606263","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-606263/test-model-606263\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"test-model-606263-sub"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"db876c7b-06a7-4aff-9144-68dc32d2f201","keyName":"e2e-tenant-inference-606263","selected_subscription":"test-model-606263-sub","selected_subscription_key":"ai-tenant-e2e-inf-a-606263/test-model-606263-sub@ai-tenant-e2e-inf-a-606263/test-model-606263","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"test-model-606263","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"test-model-606263-sub","namespace":"ai-tenant-e2e-inf-a-606263","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6ce4b44-cb89-4cc8-a978-0c88301db08a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:37454","PortSpecifier":{"PortValue":37454}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.56:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392617,"nanos":930554976},"http":{"id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","method":"POST","headers":{":authority":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"7a33cbc512ee33c04da1973886fddea591fd1e806cc04d3502fccf231d92b100"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.56:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-a-606263.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-inf-a-606263/test-model-606263\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b012ff3-0fbd-470e-8f65-d37e5c431439","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","method":"POST","path":"/ai-tenant-e2e-inf-b-decb12/test-model-decb12/v1/chat/completions","host":"e2e-inf-b-decb12.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:49840","PortSpecifier":{"PortValue":49840}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392617,"nanos":966711824},"http":{"id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","method":"POST","headers":{":authority":"e2e-inf-b-decb12.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-decb12/test-model-decb12/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-IhnOjt2iTD35biik_tkMnRvcKze7AEVf6ZwC6gjNzf4H1FAWBR6P2RHErcBp"}
{"level":"debug","ts":"2026-07-07T02:50:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-inf-b-decb12.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-IhnOjt2iTD35biik_tkMnRvcKze7AEVf6ZwC6gjNzf4H1FAWBR6P2RHErcBp\"}"}
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-decb12.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"cannot fetch metadata","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-inf-b-decb12.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"reason":"no such key: groups"}
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-inf-b-decb12.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-inf-b-decb12/test-model-decb12/v1/chat/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T02:50:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"eb027d91-02db-4319-b400-6cfb7a0dbddf","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T02:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7a33cbc512ee33c04da1973886fddea591fd1e806cc04d3502fccf231d92b100"}
{"level":"info","ts":"2026-07-07T02:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5a74cb050d557c1ff6285cbd6fd78e748628795b80c4d9de14f8b9953d745ba8"}
{"level":"info","ts":"2026-07-07T02:50:23Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bed3eb8d21c1a84890fb5ccf8fa58f24756b5e6d7036e74898a58e50728c92d2"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/22250c4e474f3ccaded7db5661790d482a973644d1437cd4ba5f88f1694c16fa"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/357d5be5e21391a5f966e03337bf879afa0148aea0298780bda34b8d3ff79d12"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fbf6f97afcd2491ee6da88ab72604d108add2914762e7df89a1195d88628f9a4"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/be70302807e1972b1398318788bf7a3494810bbc8384b5fdec582b938bf8f521"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aa9639d0ccb8f15db4dccef5119c69a8a7aa775124e4f984c815b28bdfef7e02"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/27528d75d7c43bf8056e21b4ea2688d6d806bb27239c3309021c2289ec13e56f"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6cc41b8131b9bf30e75a3e108b4da041a5c3bfbf7247fc45421322c3365da6b"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/997ac85cc2232b5af0ed6b533bd19cc697607771d0ed405f9245dc5063850e47"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4946fd8cd3bfa1c926e8ee11ee6095141634388ad7b74d0be5b531bb893daac"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/76a03d6b9c65234007821afe9ee798481f6221bf1616544cc8a3feb9ddcff186"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2354fd4f75240259798917e381f9344c4b11e79bd4f719b106b68815a5c81eef"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/01acd14fe88d7224aeabfc874403d1a6dfd7ccf68e539f0f95f0c0ae89b32089"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c1d0db826b91900097eb23457066ed8510c17bc0f3746c9c579a0111ff1325b"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e74d6e218537a206924385c8203c3d5d8200f4337463ea2ef928d70ed59b53a"}
{"level":"info","ts":"2026-07-07T02:50:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9d7995ef66369c3cd82cbeb6399075c811329bc9072c7c10adc8e363b08a6e8d"}
{"level":"info","ts":"2026-07-07T02:51:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e1b9b836fb47e80fff4608451f7b9eb994a1aa9c9fcf5f04ae734c6a6464c827"}
{"level":"info","ts":"2026-07-07T02:51:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d09305ccafd1347fcf2525ca002db5708676dc6bce4779c55e442819294e727b"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:22Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948"}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:30Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:30Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:51:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:51:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"info","ts":"2026-07-07T02:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/722408bd4d17911422e22930cbc518a994b360790fd0c23ae02041f18abdd61a"}
{"level":"info","ts":"2026-07-07T02:51:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/97474a7db68acaaa3b243061172e78fdd780d1f8165cc5210c0fc68e0c9edd7f"}
{"level":"info","ts":"2026-07-07T02:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7e47d0f1634bd33cdfaf97f41bca3bfca4cff389239687d3e3a9032dbab7948"}
{"level":"info","ts":"2026-07-07T02:51:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1de2ce236e036c4489a3f79320396cccdce92f4ab1bbb710594b359adf12accd"}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8"}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:49Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:49Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c"}
{"level":"error","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:50Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654"}
{"level":"error","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3"}
{"level":"info","ts":"2026-07-07T02:53:50Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"error","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440"}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"}
{"level":"error","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:53:58Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:53:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48334","PortSpecifier":{"PortValue":48334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dd94ea3e-7c18-4695-a753-0141b7168e09","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48334","PortSpecifier":{"PortValue":48334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392840,"nanos":454816143},"http":{"id":"dd94ea3e-7c18-4695-a753-0141b7168e09","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dd94ea3e-7c18-4695-a753-0141b7168e09","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53956","PortSpecifier":{"PortValue":53956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53956","PortSpecifier":{"PortValue":53956}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392840,"nanos":514202158},"http":{"id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"30beeb3e-7c6d-4216-b3f3-6cd0ac275a91","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48344","PortSpecifier":{"PortValue":48344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5974836b-65bf-40fe-8dfa-b16cfa893522","method":"GET","path":"/maas-api/v1/api-keys/3602a5b1-ce9a-4ff9-962e-3dbefb583576","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:48344","PortSpecifier":{"PortValue":48344}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392840,"nanos":603008212},"http":{"id":"5974836b-65bf-40fe-8dfa-b16cfa893522","method":"GET","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3602a5b1-ce9a-4ff9-962e-3dbefb583576",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/3602a5b1-ce9a-4ff9-962e-3dbefb583576",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5974836b-65bf-40fe-8dfa-b16cfa893522","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53970","PortSpecifier":{"PortValue":53970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","method":"GET","path":"/maas-api/v1/api-keys/a6a1aa54-d711-495e-ac02-62c7a1cd2d54","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:53970","PortSpecifier":{"PortValue":53970}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392840,"nanos":636939805},"http":{"id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","method":"GET","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a6a1aa54-d711-495e-ac02-62c7a1cd2d54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/a6a1aa54-d711-495e-ac02-62c7a1cd2d54",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6a090134-2a96-40f0-a63b-b0831dc5eebf","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59136","PortSpecifier":{"PortValue":59136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"47d67cc9-9971-4613-b8fa-c694215abcef","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59136","PortSpecifier":{"PortValue":59136}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392857,"nanos":713296987},"http":{"id":"47d67cc9-9971-4613-b8fa-c694215abcef","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"47d67cc9-9971-4613-b8fa-c694215abcef","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:51378","PortSpecifier":{"PortValue":51378}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392857,"nanos":749283205},"http":{"id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d41382ec-ed7c-4638-8139-f4dc6ccb499d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59146","PortSpecifier":{"PortValue":59146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b7feda06-9d37-41ad-b644-7df1d261f5da","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:59146","PortSpecifier":{"PortValue":59146}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392857,"nanos":788170998},"http":{"id":"b7feda06-9d37-41ad-b644-7df1d261f5da","method":"GET","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-hS8SwVxC8fN53ehK_hNGE6twb0sobaCMoHy3Uni3knliEWorSap7o0qpgtoh"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-hS8SwVxC8fN53ehK_hNGE6twb0sobaCMoHy3Uni3knliEWorSap7o0qpgtoh\"}"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"a83063d1-97fc-4150-9093-3aec81387d64","keyName":"e2e-auth-iso-a-b1e1d9","subscription":"e2e-auth-iso-acb06c","tenant":"e2e-shared-a-bb462a","userId":"a83063d1-97fc-4150-9093-3aec81387d64","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-acb06c"}
{"level":"info","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b7feda06-9d37-41ad-b644-7df1d261f5da","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80024fa4-2f31-4680-9f3f-552938161cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35022","PortSpecifier":{"PortValue":35022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"80024fa4-2f31-4680-9f3f-552938161cff","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"80024fa4-2f31-4680-9f3f-552938161cff","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35022","PortSpecifier":{"PortValue":35022}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392881,"nanos":241421406},"http":{"id":"80024fa4-2f31-4680-9f3f-552938161cff","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"80024fa4-2f31-4680-9f3f-552938161cff","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"80024fa4-2f31-4680-9f3f-552938161cff","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"80024fa4-2f31-4680-9f3f-552938161cff","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80024fa4-2f31-4680-9f3f-552938161cff","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"80024fa4-2f31-4680-9f3f-552938161cff","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47620","PortSpecifier":{"PortValue":47620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47620","PortSpecifier":{"PortValue":47620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392881,"nanos":274858559},"http":{"id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c3e2d6e1-517c-430b-86dd-2e9df0691452","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:47636","PortSpecifier":{"PortValue":47636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392881,"nanos":314505942},"http":{"id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","method":"GET","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1RPt4cIisC8hy1P5r_wen7u3n2gIWjeba9mzVzGvnFwN6SGn4Yrz7z8YdTk4I"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1RPt4cIisC8hy1P5r_wen7u3n2gIWjeba9mzVzGvnFwN6SGn4Yrz7z8YdTk4I\"}"}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-07T02:54:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"99e4b1ea-9126-40bf-a987-4b8c15af4fa8","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36952","PortSpecifier":{"PortValue":36952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36952","PortSpecifier":{"PortValue":36952}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392898,"nanos":443602354},"http":{"id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e5eff419-ec61-4a9e-b08c-d7d894c416f0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d724e302-082b-472d-97c9-fd32f592d103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56280","PortSpecifier":{"PortValue":56280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d724e302-082b-472d-97c9-fd32f592d103","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d724e302-082b-472d-97c9-fd32f592d103","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56280","PortSpecifier":{"PortValue":56280}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392898,"nanos":479006546},"http":{"id":"d724e302-082b-472d-97c9-fd32f592d103","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d724e302-082b-472d-97c9-fd32f592d103","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d724e302-082b-472d-97c9-fd32f592d103","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d724e302-082b-472d-97c9-fd32f592d103","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d724e302-082b-472d-97c9-fd32f592d103","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d724e302-082b-472d-97c9-fd32f592d103","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36960","PortSpecifier":{"PortValue":36960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36960","PortSpecifier":{"PortValue":36960}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392898,"nanos":520049727},"http":{"id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bf96e3c6-97b0-4245-b609-5c57ec5b691e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56292","PortSpecifier":{"PortValue":56292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56292","PortSpecifier":{"PortValue":56292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392898,"nanos":564299191},"http":{"id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:54:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94a4c91d-a7dd-4e8e-bc03-b94ccf74bd1a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c7d459d-0531-42cb-8039-afd04d346a67","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35396","PortSpecifier":{"PortValue":35396}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392915,"nanos":659762016},"http":{"id":"0c7d459d-0531-42cb-8039-afd04d346a67","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c7d459d-0531-42cb-8039-afd04d346a67","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56868","PortSpecifier":{"PortValue":56868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56868","PortSpecifier":{"PortValue":56868}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392915,"nanos":699463487},"http":{"id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fbcad758-7c85-4c9e-a45c-ad8e19404782","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56872","PortSpecifier":{"PortValue":56872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"98611297-6a0a-45ce-9bbd-25cf22f30374","method":"GET","path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56872","PortSpecifier":{"PortValue":56872}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392915,"nanos":735090174},"http":{"id":"98611297-6a0a-45ce-9bbd-25cf22f30374","method":"GET","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"98611297-6a0a-45ce-9bbd-25cf22f30374","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35406","PortSpecifier":{"PortValue":35406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","method":"GET","path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:35406","PortSpecifier":{"PortValue":35406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392915,"nanos":772384451},"http":{"id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","method":"GET","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/c3d965e0-7e54-48e1-af1d-4f7dc52c0514",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:15Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3478d8eb-1e10-4370-ab47-0cff0f9a27a3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58678","PortSpecifier":{"PortValue":58678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58678","PortSpecifier":{"PortValue":58678}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392930,"nanos":727932926},"http":{"id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b804f35d-4601-4f83-8f2c-36c4154fe6ce","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42032","PortSpecifier":{"PortValue":42032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42032","PortSpecifier":{"PortValue":42032}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392930,"nanos":767226673},"http":{"id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/auth-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fb37bafd-0ebd-47cf-bdac-7b9bc5030bda","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58694","PortSpecifier":{"PortValue":58694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:58694","PortSpecifier":{"PortValue":58694}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783392930,"nanos":809041932},"http":{"id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-JZFhGUKvG74ktZdC_QKFLcoH3VnI4c6e5SkUIHa1b9xKTTrmdu1gCZUqRmtx"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-JZFhGUKvG74ktZdC_QKFLcoH3VnI4c6e5SkUIHa1b9xKTTrmdu1gCZUqRmtx\"}"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8f5a4fd6-46b2-41b0-9d61-14f849397564","keyName":"e2e-auth-iso-a-f903ef","subscription":"e2e-auth-iso-e09b18","tenant":"e2e-shared-a-bb462a","userId":"8f5a4fd6-46b2-41b0-9d61-14f849397564","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/auth-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-e09b18"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:55:30Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"dfe56979-28ef-4edb-b687-839d9e2fbdde","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1484a2c4ab588b4926970085dd25aacbf4acee5a76b00beea50edb28c0d5a912"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1867760de788e57f88a555dd2d7e853c56d10534b07397ce256026b2660e2ed3"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/19ec60bd4ba522fc7d0769f33bc6d7bee532f9c5d791e714939a4e8088e8906c"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e9193d9ab3f418db47411e77bc0e3655885c9cb15250651d3ca67a58874b3b0f"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cceb6b9edbae3c7f8ed4e12ecaaf971d5685a7e8bfe09c2cb78a8c3ff695b9ab"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5487b928a371a710170196f514215df6a334e6556b8defdc5621bf9a61d7ae25"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/40be072f12969572f66012ed8172edf4b862fe4ea5a6f174e5b9ba3d736919cc"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3ad97b096b94dd9b659b604e685607ed9dca2e8b9108aa7b980cbcd09d374daa"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6c9fd075ff662b5c94f329c01f3c8b45890b99c7bc51951cfb4237c7b36110d8"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5cc2a529b1b2e6db14299dec26bcfd1b469e3c7267206ed456b1f4664987bac9"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd47aedc3ff4601469783accdead49585b23a29cd83fa2960b2c0df80c7f01e4"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dec1b98a0f302432c910fd0a26506fb3ace96fceaaed666a802bf47e5d163f1e"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b94fb2cfe1a741a5eb818373779c0c84cd219582a48cd925609de91f42514440"}
{"level":"info","ts":"2026-07-07T02:55:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6e5072454b668634755f15d80d377d561e528a7181af6897f27df5e6dade76dd"}
{"level":"info","ts":"2026-07-07T02:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4194b6b5199fd49ace5a4015f52a699572ceb300a2b713a30f220e777a6d8526"}
{"level":"info","ts":"2026-07-07T02:55:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6304e4f4c616ff279490c5cb9f13ee9f46fad801b2d69482a7b9dcbd8e84e654"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:53Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"error","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:55:54Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:55:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"error","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"info","ts":"2026-07-07T02:56:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:36Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:56:36Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:56:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"}
{"level":"error","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"debug","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:56:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38054","PortSpecifier":{"PortValue":38054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38054","PortSpecifier":{"PortValue":38054}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393001,"nanos":698197418},"http":{"id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/sub-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8986890c-27fd-4d22-9dec-a5b3548d0ce4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50232","PortSpecifier":{"PortValue":50232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50232","PortSpecifier":{"PortValue":50232}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393001,"nanos":740215826},"http":{"id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/sub-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afdad69b-9072-4f79-9d78-bdb4ff47ee3b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9e96638-293e-4854-aa42-28e41d38283d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38070","PortSpecifier":{"PortValue":38070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d9e96638-293e-4854-aa42-28e41d38283d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d9e96638-293e-4854-aa42-28e41d38283d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:38070","PortSpecifier":{"PortValue":38070}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393001,"nanos":782809102},"http":{"id":"d9e96638-293e-4854-aa42-28e41d38283d","method":"GET","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ymZGYfVOx1Yqa5of_hyOmHb8ABoH9TPLvAH5GhTj3UPyIMKUfQjLnR3Q8EhG"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ymZGYfVOx1Yqa5of_hyOmHb8ABoH9TPLvAH5GhTj3UPyIMKUfQjLnR3Q8EhG\"}"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f5560e93-9582-4d91-b7dd-e6329ca90de6","keyName":"e2e-sub-iso-0ca707","subscription":"e2e-a-only-d26c81","tenant":"e2e-shared-a-bb462a","userId":"f5560e93-9582-4d91-b7dd-e6329ca90de6","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d9e96638-293e-4854-aa42-28e41d38283d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/sub-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-d26c81"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d9e96638-293e-4854-aa42-28e41d38283d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9e96638-293e-4854-aa42-28e41d38283d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d9e96638-293e-4854-aa42-28e41d38283d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50240","PortSpecifier":{"PortValue":50240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:50240","PortSpecifier":{"PortValue":50240}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393001,"nanos":823504107},"http":{"id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","method":"GET","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-OnCjnm9E7SFpfN62_hytEHjMTMQrl8r7RruBVmYIPpJ9VOw0V382kt2iakzG"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-OnCjnm9E7SFpfN62_hytEHjMTMQrl8r7RruBVmYIPpJ9VOw0V382kt2iakzG\"}"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"d5acbf60-9271-4ecd-924a-427ac1ce7573","keyName":"e2e-sub-iso-8a1c47","subscription":"e2e-b-only-d26c81","tenant":"e2e-shared-b-890bdd","userId":"d5acbf60-9271-4ecd-924a-427ac1ce7573","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/sub-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-d26c81"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78b0b4b1-d3bc-4234-aab7-66f4cc87e5a4","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56696","PortSpecifier":{"PortValue":56696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01111a96-2082-4cea-8448-6686e9ad4e6c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56696","PortSpecifier":{"PortValue":56696}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393011,"nanos":767989377},"http":{"id":"01111a96-2082-4cea-8448-6686e9ad4e6c","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/sub-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01111a96-2082-4cea-8448-6686e9ad4e6c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52820","PortSpecifier":{"PortValue":52820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52820","PortSpecifier":{"PortValue":52820}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393011,"nanos":803457319},"http":{"id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/sub-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b9c26c9f-4f2b-4a75-9894-6510c10f9aab","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56698","PortSpecifier":{"PortValue":56698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79594bfe-5752-4ed5-aef3-90585a1a2202","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:56698","PortSpecifier":{"PortValue":56698}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393011,"nanos":841329567},"http":{"id":"79594bfe-5752-4ed5-aef3-90585a1a2202","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1GmDmCQGKJoxCLOWw_ora5bEUw060qTWf7DeBSVrNAxYiPnjUyWQeHsdBElPp"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1GmDmCQGKJoxCLOWw_ora5bEUw060qTWf7DeBSVrNAxYiPnjUyWQeHsdBElPp\"}"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"46ab6234-2701-44c4-9cc5-7b9ede289e6f","keyName":"e2e-sub-iso-d574b8","subscription":"e2e-shared-sub-cbfb74","tenant":"e2e-shared-a-bb462a","userId":"46ab6234-2701-44c4-9cc5-7b9ede289e6f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/sub-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cbfb74"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79594bfe-5752-4ed5-aef3-90585a1a2202","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52832","PortSpecifier":{"PortValue":52832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c6551104-af9c-461f-8b43-132c5bce1c54","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52832","PortSpecifier":{"PortValue":52832}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393011,"nanos":872829609},"http":{"id":"c6551104-af9c-461f-8b43-132c5bce1c54","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11XU4ejF1BpOop85n_RBpYeQQKm89fdxP19OYTKa40X6vqIqXj9f0vrYbZrVl"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11XU4ejF1BpOop85n_RBpYeQQKm89fdxP19OYTKa40X6vqIqXj9f0vrYbZrVl\"}"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"2b786eb6-f835-4fde-89b3-cc1d34a0be23","keyName":"e2e-sub-iso-6b2ace","subscription":"e2e-shared-sub-cbfb74","tenant":"e2e-shared-b-890bdd","userId":"2b786eb6-f835-4fde-89b3-cc1d34a0be23","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/sub-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-cbfb74"}
{"level":"info","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:56:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c6551104-af9c-461f-8b43-132c5bce1c54","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:56:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dc844e367c1053207687c61557983352fddb8eb3ca7217f7bbad2d155318cfde"}
{"level":"info","ts":"2026-07-07T02:56:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8fbf794aea40125f3ca8490cb26371a8bc122e35beacf894af46e3ebd8337d28"}
{"level":"info","ts":"2026-07-07T02:56:58Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1728aa6afd1e61a61618f6605082c267ac23c446373efc496b1b7048a76a155d"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a919434f6b0692e6e0c6f0416868dc99b73bfacf7fd314d185feff4f3227667d"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bb866bbe1be98db5c3b9d262bb5a6022c0d6fb26b5f248b5dd06c698ecf360d0"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a799e3e6f5eb4f90ff627d814947a5cc070f7a1292c401c77c48db52913921d6"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e6440c06798728297a4977db63a6ef2de39adfc70ad588e2ef6ededb08aed2a3"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d96a5d9236f5600b4836432c9f1f647d64e4cad900e732a678c47296481899b8"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0d0acd70066f348bf3041c22718769e404e5da222aa1300691ca973e089f506e"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca53759036dd7256e508ecff35f70c77f502989dccf4359750d073568e9b39df"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/30fd83a4269d9dfd705b71428e17bfbf84b6b1a0973346eb34b2baf6843d9629"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0fbcdbe739489b2d4463fc847ebd20917dfb27f62067d6b5297155694366d8d"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/33458046f6b9fd2d4600312fc6f216c6212df7989d8fd4d83bc1537949f48d77"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/284b9b62b11eb728ab63fe8db6feddea7efe0bd5cfef24ec4d07ad2734eb3337"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24fc534c54ac63ed9af524b55794f0c5e14c75ae144c475398f251c58183f9e6"}
{"level":"info","ts":"2026-07-07T02:56:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b7f49c69ab0680f2ccfc31393fdd8f38865d720f3855cdbfbc9d373713423fd0"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"debug","ts":"2026-07-07T02:57:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"info","ts":"2026-07-07T02:57:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"}
{"level":"info","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:46Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"error","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"error","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"error","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:57:47Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"error","ts":"2026-07-07T02:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:57:48Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"error","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"error","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-07T02:58:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-07T02:58:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42406","PortSpecifier":{"PortValue":42406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"06e12867-8464-4f82-9a24-6c56834e98f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42406","PortSpecifier":{"PortValue":42406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393089,"nanos":543035263},"http":{"id":"06e12867-8464-4f82-9a24-6c56834e98f2","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"06e12867-8464-4f82-9a24-6c56834e98f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52152","PortSpecifier":{"PortValue":52152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f114825a-2a8d-4138-8130-bca07fd2d57e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:52152","PortSpecifier":{"PortValue":52152}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393089,"nanos":589684233},"http":{"id":"f114825a-2a8d-4138-8130-bca07fd2d57e","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f114825a-2a8d-4138-8130-bca07fd2d57e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42416","PortSpecifier":{"PortValue":42416}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393089,"nanos":634325451},"http":{"id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI\"}"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","subscription":"e2e-rate-iso-a-9bc37d","tenant":"e2e-shared-a-bb462a","userId":"207f8b0d-c9e9-41dc-9a68-32197722501e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-9bc37d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bc37d"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","selected_subscription":"e2e-rate-iso-a-9bc37d","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-9bc37d@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:09Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2e0c2b56-b743-49db-ba5b-b1687ee38c72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42430","PortSpecifier":{"PortValue":42430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42430","PortSpecifier":{"PortValue":42430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393090,"nanos":700536422},"http":{"id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI\"}"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","subscription":"e2e-rate-iso-a-9bc37d","tenant":"e2e-shared-a-bb462a","userId":"207f8b0d-c9e9-41dc-9a68-32197722501e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-9bc37d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bc37d"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","selected_subscription":"e2e-rate-iso-a-9bc37d","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-9bc37d@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:10Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d38cce0e-7587-47dc-bb41-0f374ff28b2e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42444","PortSpecifier":{"PortValue":42444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1278a53c-be51-4b2f-824a-3df64540f39b","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:42444","PortSpecifier":{"PortValue":42444}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393091,"nanos":741697803},"http":{"id":"1278a53c-be51-4b2f-824a-3df64540f39b","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1M9pwad4gimtmjBij_Qj3WBOVliMOxjxMREubGdE1rnEbJkNLlLhh77dyoEHI\"}"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","subscription":"e2e-rate-iso-a-9bc37d","tenant":"e2e-shared-a-bb462a","userId":"207f8b0d-c9e9-41dc-9a68-32197722501e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-9bc37d\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-9bc37d"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"207f8b0d-c9e9-41dc-9a68-32197722501e","keyName":"e2e-rate-a-9bc37d","selected_subscription":"e2e-rate-iso-a-9bc37d","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-9bc37d@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-9bc37d","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:11Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1278a53c-be51-4b2f-824a-3df64540f39b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36600","PortSpecifier":{"PortValue":36600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36600","PortSpecifier":{"PortValue":36600}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393102,"nanos":489193741},"http":{"id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.132.0.62:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bc4f012f-74e7-4897-bca6-0957ed1fc12e","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55958","PortSpecifier":{"PortValue":55958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55958","PortSpecifier":{"PortValue":55958}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393102,"nanos":527614116},"http":{"id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"]}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/1cc171eb02d7"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=8758edfc-8299-42b8-ad0c-bf7274c11961"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"2f78bbed-e9ec-47ca-8240-b98fa911e428","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.42:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f5b9313c-ad69-44c5-93bb-26d0b1f46264","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36614","PortSpecifier":{"PortValue":36614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36614","PortSpecifier":{"PortValue":36614}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393102,"nanos":572773675},"http":{"id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW\"}"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","subscription":"e2e-rate-iso-a-3cbce0","tenant":"e2e-shared-a-bb462a","userId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-3cbce0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cbce0"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","selected_subscription":"e2e-rate-iso-a-3cbce0","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-3cbce0@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac10bd8-8ac6-4c74-975f-36e51f46c86f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36620","PortSpecifier":{"PortValue":36620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:36620","PortSpecifier":{"PortValue":36620}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393103,"nanos":617811789},"http":{"id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW\"}"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","subscription":"e2e-rate-iso-a-3cbce0","tenant":"e2e-shared-a-bb462a","userId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-3cbce0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cbce0"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","selected_subscription":"e2e-rate-iso-a-3cbce0","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-3cbce0@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:23Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"fc77d1d9-12c4-4684-bb8c-f3b09397d6a8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"65e35efc-2da2-48c4-aa85-40772adc702f","method":"POST","path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions","host":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:60286","PortSpecifier":{"PortValue":60286}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.62:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393104,"nanos":656915643},"http":{"id":"65e35efc-2da2-48c4-aa85-40772adc702f","method":"POST","headers":{":authority":"e2e-shared-a-bb462a.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-10YvSAlD99M7RmWwg_jmnkY3HqmxfxReq8BS6ORX2t91WiZxnRp3LIIfSP0yW\"}"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","subscription":"e2e-rate-iso-a-3cbce0","tenant":"e2e-shared-a-bb462a","userId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\",\"requestedSubscription\":\"e2e-rate-iso-a-3cbce0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-bb462a.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-3cbce0"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"1498d0ef-c5b6-4213-b8eb-d95e7d2b3e7e","keyName":"e2e-rate-a-3cbce0","selected_subscription":"e2e-rate-iso-a-3cbce0","selected_subscription_key":"ai-tenant-e2e-shared-a-bb462a/e2e-rate-iso-a-3cbce0@ai-tenant-e2e-shared-a-bb462a/rate-test-model-bb462a","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-bb462a","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-3cbce0","namespace":"ai-tenant-e2e-shared-a-bb462a","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"65e35efc-2da2-48c4-aa85-40772adc702f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","method":"POST","path":"/ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd/v1/completions","host":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.12:55478","PortSpecifier":{"PortValue":55478}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.42:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783393104,"nanos":697449903},"http":{"id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","method":"POST","headers":{":authority":"e2e-shared-b-890bdd.apps.5f6476fe-9a8c-40a7-9153-1cc171eb02d7.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-cEubLEpKEQn7TOtH_C72GTqfu6lFx1V0OgQygFyfMEozkiTzbTMMZzmOAswn"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-cEubLEpKEQn7TOtH_C72GTqfu6lFx1V0OgQygFyfMEozkiTzbTMMZzmOAswn\"}"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"815a9d80-3540-406d-9031-95c1381fce7b","keyName":"e2e-rate-b-3cbce0","subscription":"e2e-rate-iso-b-3cbce0","tenant":"e2e-shared-b-890bdd","userId":"815a9d80-3540-406d-9031-95c1381fce7b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd\",\"requestedSubscription\":\"e2e-rate-iso-b-3cbce0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-890bdd.opendatahub.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-890bdd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cbce0","namespace":"ai-tenant-e2e-shared-b-890bdd","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-3cbce0"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"815a9d80-3540-406d-9031-95c1381fce7b","keyName":"e2e-rate-b-3cbce0","selected_subscription":"e2e-rate-iso-b-3cbce0","selected_subscription_key":"ai-tenant-e2e-shared-b-890bdd/e2e-rate-iso-b-3cbce0@ai-tenant-e2e-shared-b-890bdd/rate-test-model-890bdd","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-890bdd","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-3cbce0","namespace":"ai-tenant-e2e-shared-b-890bdd","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-07T02:58:24Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f9cce1ce-0f62-4384-a807-7af9eb9e5949","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ef3b45dc75997c7497b4943365ff9b80a029e070fb013bb7a56d4274fa3bd963"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4e0889521c33946457ebc58754617d1279679aab9224011b0be3af610918eda1"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a52e2e889c7f0663dd543a791e635ad26dc34934b58e796517d46bca3fc2894c"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/24f7e603a6d4c44f6a94e604483567beddb9cf7af06d6332daf5a6cffbbd78cf"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c2cd3da0bbd9930035c80d918792ba90df650804b84590700feb195e84d440d"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1d9ddeeb188f459a5bdb07f347302bbfcf89b923bd74d5de7ddd0a296996c9fe"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0eedb476fd3ea58ab1738b842626f6ef8a9cd10798a9eba3e86ba9145ec08d90"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/855d6f779d7e2579482b201980290a39c5cfd4f295a1e6974c86f6a9fc09147c"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b24c4c51d184ec236fc16cfbf19d4cdaeb5c05692596e5eb8030ac1eafa65c15"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8a9d166c403eb6a362e3b11aa9d5b2498b82a5f1390076213fb23d918cd3abf5"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7246dade53808dafc2f08269d5755fc7d6eb912a5a275f93092a996fd68d64f0"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0c7b148cc01f857953bbc7e4bad8e691b3ab50d84a60a0815160891270698815"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38059670a350bfce7397f34dae59b4313402e91b36b590e8208c59c900993fcd"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/709d061abe529d45e48db7c776f6acd5ba7ada2274da3d46d687cba52c3b81c7"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/25c33dadfdb2a2a14bc2539d2ceb490c18691350976708a13e008a26854a41fd"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0aa00c93856624a843d1187544ecb035617c12fa7496f94b5ce5f2182c4ec1a5"}
{"level":"info","ts":"2026-07-07T02:58:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e7e114689ab52b3e3b4ad06bbaee0d7fd7e89ecb5631fd0a24380c3d4ae0b79e"}
{"level":"info","ts":"2026-07-07T02:58:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/96462ea9dca875a2d91d3210a3705f17171c0d0d72ca2ff67529c91b84fcaa83"}
{"level":"info","ts":"2026-07-07T02:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5e65e9225d22134fe5c2dde00f4a48d6722a971c549c9a6de20893d7f9b451dd"}
{"level":"info","ts":"2026-07-07T02:59:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1b2b0ef3049c960df57d2a8b72bfd4b964b3bd6d1d01e2d2cfd91e6c510dea7e"}