--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ad86c01b3ff4de7dcfed1dbb31652df2fb5df3013c7837f2fe5bd61ead85075"}
{"level":"error","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:11:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:11:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7bff42079d6e62e09892ea1a5c5455dd2c7b693f35167ff6d69a91d2bbead940"}
{"level":"info","ts":"2026-07-14T18:11:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/727d2001b9337c925608f5466b03dfaa4ee328b0b5a9a17fb41c9244d786b8e4"}
{"level":"info","ts":"2026-07-14T18:11:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5c5ece1489d3fd343dd4bf8c609e09d94c9dd73914d278e6ab75a64b9f3f1d3a"}
{"level":"info","ts":"2026-07-14T18:11:26Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6fe56d5d678e59634a709088842fb2b923d37c8eed710748468fccac0d215451"}
{"level":"info","ts":"2026-07-14T18:11:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dd7134f0004f6b32f5f349592c7c9b42617e0f7d26ca4867a12267cceb498699"}
{"level":"info","ts":"2026-07-14T18:11:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ad86c01b3ff4de7dcfed1dbb31652df2fb5df3013c7837f2fe5bd61ead85075"}
{"level":"info","ts":"2026-07-14T18:11:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ed590dbfb631ddb1ae69f7e17918c37d1b6e257a1c34dca4479e5ff073ac04bf"}
{"level":"info","ts":"2026-07-14T18:11:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c74b55288368403d13925f488736e691cc4055d31c8f1f1913cf0404113460ed"}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:16Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:16Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6"}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:17Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:17Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:18Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:13:18Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378"}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:24Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:24Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"error","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:13:25Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:13:25Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e79877fb-62e8-4b69-8896-ad671d833709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e79877fb-62e8-4b69-8896-ad671d833709","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e79877fb-62e8-4b69-8896-ad671d833709","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50406","PortSpecifier":{"PortValue":50406}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052807,"nanos":479689844},"http":{"id":"e79877fb-62e8-4b69-8896-ad671d833709","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e79877fb-62e8-4b69-8896-ad671d833709","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e79877fb-62e8-4b69-8896-ad671d833709","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e79877fb-62e8-4b69-8896-ad671d833709","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e79877fb-62e8-4b69-8896-ad671d833709","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e79877fb-62e8-4b69-8896-ad671d833709","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58310","PortSpecifier":{"PortValue":58310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58310","PortSpecifier":{"PortValue":58310}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052807,"nanos":541351686},"http":{"id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b29cae-2d39-478d-b1f7-87f6016b056a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"919413a9-85e9-44c6-a838-e010ca735b10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50418","PortSpecifier":{"PortValue":50418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"919413a9-85e9-44c6-a838-e010ca735b10","method":"GET","path":"/maas-api/v1/api-keys/b9c42433-bdd8-4d3d-839f-81c53f2c48ea","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"919413a9-85e9-44c6-a838-e010ca735b10","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50418","PortSpecifier":{"PortValue":50418}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052807,"nanos":608408418},"http":{"id":"919413a9-85e9-44c6-a838-e010ca735b10","method":"GET","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c42433-bdd8-4d3d-839f-81c53f2c48ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"919413a9-85e9-44c6-a838-e010ca735b10","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"919413a9-85e9-44c6-a838-e010ca735b10","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/b9c42433-bdd8-4d3d-839f-81c53f2c48ea",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"919413a9-85e9-44c6-a838-e010ca735b10","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"919413a9-85e9-44c6-a838-e010ca735b10","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"919413a9-85e9-44c6-a838-e010ca735b10","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24c70393-55e5-47f0-8897-784ff5e6ce15","method":"GET","path":"/maas-api/v1/api-keys/7e2bddab-6c9c-45f8-93cd-3b30495c3479","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:58312","PortSpecifier":{"PortValue":58312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052807,"nanos":646724130},"http":{"id":"24c70393-55e5-47f0-8897-784ff5e6ce15","method":"GET","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e2bddab-6c9c-45f8-93cd-3b30495c3479",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/7e2bddab-6c9c-45f8-93cd-3b30495c3479",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:27Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24c70393-55e5-47f0-8897-784ff5e6ce15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42400","PortSpecifier":{"PortValue":42400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42400","PortSpecifier":{"PortValue":42400}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052824,"nanos":784994587},"http":{"id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"afb0f12f-cb12-4a84-8a9f-ecb00090ec0d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48000","PortSpecifier":{"PortValue":48000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:48000","PortSpecifier":{"PortValue":48000}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052824,"nanos":824083099},"http":{"id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"db6d1524-e880-4dce-94e4-28b9fcd6071d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:42410","PortSpecifier":{"PortValue":42410}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052824,"nanos":862441576},"http":{"id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","method":"GET","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1D88dYbImykz93LTl_N6upxKf6OTIVcMBHp01TW7nFzw0vtSxCvqdU0XTf9xv"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1D88dYbImykz93LTl_N6upxKf6OTIVcMBHp01TW7nFzw0vtSxCvqdU0XTf9xv\"}"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"39c31061-49d1-462a-b323-4b047655ed56","keyName":"e2e-auth-iso-a-a40ac2","subscription":"e2e-auth-iso-855d4f","tenant":"e2e-shared-a-aa324e","userId":"39c31061-49d1-462a-b323-4b047655ed56","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-855d4f"}
{"level":"info","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:44Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1a9bd1cf-53ac-499c-8ffe-a6a6be6e5794","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60342","PortSpecifier":{"PortValue":60342}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052839,"nanos":913712205},"http":{"id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"950a3efa-e7ff-4dcf-8dfd-f4f82cf5d376","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56488","PortSpecifier":{"PortValue":56488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56488","PortSpecifier":{"PortValue":56488}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052839,"nanos":949338752},"http":{"id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"3eda3ff6-3da1-41fd-8abc-08f45407cecc","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56496","PortSpecifier":{"PortValue":56496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:56496","PortSpecifier":{"PortValue":56496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052839,"nanos":988278958},"http":{"id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","method":"GET","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1cHJScFFTE5tzPblG_uk8RKXMTIoDzM8g2nVwHg8axao3XCIR6OaYI0BTcYbZ"}
{"level":"debug","ts":"2026-07-14T18:13:59Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1cHJScFFTE5tzPblG_uk8RKXMTIoDzM8g2nVwHg8axao3XCIR6OaYI0BTcYbZ\"}"}
{"level":"debug","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-14T18:14:00Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"78c22b04-0f49-47b3-a19f-e635e0bc502a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59210","PortSpecifier":{"PortValue":59210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59210","PortSpecifier":{"PortValue":59210}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052857,"nanos":274238181},"http":{"id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a71cdaca-04af-458a-bf83-ab1d7c91a84d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34570","PortSpecifier":{"PortValue":34570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34570","PortSpecifier":{"PortValue":34570}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052857,"nanos":308445360},"http":{"id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c822ff9c-fe14-405c-9306-0304e3b9d63b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235062a5-a254-4b29-be80-16e50c1074c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"235062a5-a254-4b29-be80-16e50c1074c9","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"235062a5-a254-4b29-be80-16e50c1074c9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:59216","PortSpecifier":{"PortValue":59216}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052857,"nanos":339743375},"http":{"id":"235062a5-a254-4b29-be80-16e50c1074c9","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"235062a5-a254-4b29-be80-16e50c1074c9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"235062a5-a254-4b29-be80-16e50c1074c9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"235062a5-a254-4b29-be80-16e50c1074c9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235062a5-a254-4b29-be80-16e50c1074c9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"235062a5-a254-4b29-be80-16e50c1074c9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34578","PortSpecifier":{"PortValue":34578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"aedf903b-96de-49d3-a897-83f906e8dcf3","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34578","PortSpecifier":{"PortValue":34578}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052857,"nanos":380281684},"http":{"id":"aedf903b-96de-49d3-a897-83f906e8dcf3","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"aedf903b-96de-49d3-a897-83f906e8dcf3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"1541a586-7145-42bb-87e8-bfd393731cb3","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60312","PortSpecifier":{"PortValue":60312}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052872,"nanos":427413767},"http":{"id":"1541a586-7145-42bb-87e8-bfd393731cb3","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"1541a586-7145-42bb-87e8-bfd393731cb3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50370","PortSpecifier":{"PortValue":50370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50370","PortSpecifier":{"PortValue":50370}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052872,"nanos":465688007},"http":{"id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"13e14dc6-fe36-4a20-a45b-a7a8cad75798","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","method":"GET","path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:50384","PortSpecifier":{"PortValue":50384}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052872,"nanos":499110351},"http":{"id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","method":"GET","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"817f3c88-33c4-4a52-8b9b-74a8d653ff4c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"292ffb33-e295-4e87-83f6-c3379a1aef71","method":"GET","path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:60322","PortSpecifier":{"PortValue":60322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052872,"nanos":530473115},"http":{"id":"292ffb33-e295-4e87-83f6-c3379a1aef71","method":"GET","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/78ef4169-f55c-4e59-927f-270125a88cc1",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"292ffb33-e295-4e87-83f6-c3379a1aef71","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49708","PortSpecifier":{"PortValue":49708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49708","PortSpecifier":{"PortValue":49708}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052891,"nanos":849776017},"http":{"id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"75216dbd-5b6f-4ed6-9c3b-cb3ad51649c1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d169894-928a-407a-af14-e8c5e1194534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33920","PortSpecifier":{"PortValue":33920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6d169894-928a-407a-af14-e8c5e1194534","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6d169894-928a-407a-af14-e8c5e1194534","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:33920","PortSpecifier":{"PortValue":33920}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052891,"nanos":888579312},"http":{"id":"6d169894-928a-407a-af14-e8c5e1194534","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6d169894-928a-407a-af14-e8c5e1194534","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6d169894-928a-407a-af14-e8c5e1194534","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/auth-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6d169894-928a-407a-af14-e8c5e1194534","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d169894-928a-407a-af14-e8c5e1194534","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6d169894-928a-407a-af14-e8c5e1194534","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49712","PortSpecifier":{"PortValue":49712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052891,"nanos":922959787},"http":{"id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ry9wSdlaMm1QVCdV_dlnStu53nrDJhLULii2p8tW3n3CQYXNnEVkxcupPixo"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ry9wSdlaMm1QVCdV_dlnStu53nrDJhLULii2p8tW3n3CQYXNnEVkxcupPixo\"}"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19da7cf5-3b9f-4048-a243-9d5666fe370f","keyName":"e2e-auth-iso-a-85e45b","subscription":"e2e-auth-iso-3708f8","tenant":"e2e-shared-a-aa324e","userId":"19da7cf5-3b9f-4048-a243-9d5666fe370f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/auth-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_info","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"groups","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-3708f8"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:14:51Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7d92c8d0-aa92-4b9e-a22d-608d3251f392","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:15:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd5ff75059ea7a66a911992cda76c24317abe182a2a43afcaa3054181be2a4d6"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3e5484820009a86daaf3161ba00a73db115e6f07dc23f17a0755e76da2d371b8"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/17610bf21d0ead628c4f0165c9d11d6e57f8bce78b0821367bd0f5d8c057f0da"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/708ac48996bb1c030c27112c52aa6071ac47d747153c66bf1bea8afac31adeba"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9f713f6f4627cf3ada4c91e75103aee886c9bcc61115bdc7393e965e099af96f"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db923ac4b387f694044d8b81dcb8b9e79ab559708c9e5a84e2d6d14c003bc6e5"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec2a3c75e991a414a63cd2566b6a8d2a823c7921ced625eb555d11058640c713"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a69ad2066f00d02177940da60c03da644398a051a0bb169cdb7c8adf22860378"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/089060822e87156cfe7b2b9a131ad913ce0f9dd4c3dda9977febd168ca342acb"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/75be781ca051375082a28505dd1ce9cfb0afa49a4b062e74c9fd0688f8cd1b02"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c0b86e5f7fbbceab3b06994c1ac67471ed4ba78245e5dba4385e2e842a5628d7"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3f0ce47cc5df06613ca2f4b432008cdb947683af9e1995a3ddf4389f36747c3d"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/350f118e42982403b57ebfa2fe7b1ea0b95ebe81ffd96f9849cdb30cd0bba7f0"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3ecb39e319951d39082929e9308a7ac363dfdf182f08c0de534d958968dd981"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c475fb2835570aa86c5208f57cbed1a55c098e146c72984bede19d2c2fb7d038"}
{"level":"info","ts":"2026-07-14T18:15:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0bcc60768fdbb19b27febffc9bc47e40e0d4b9941a41b4ff046dcb7ee92ff77f"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:20Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:20Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"info","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:21Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:21Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"}
{"level":"info","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"}
{"level":"info","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:15:22Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"error","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"error","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:15:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:15:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:00Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:01Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"debug","ts":"2026-07-14T18:16:01Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:16:02Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55566","PortSpecifier":{"PortValue":55566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55566","PortSpecifier":{"PortValue":55566}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052965,"nanos":319299295},"http":{"id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/sub-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"24b65b53-ad76-4dd3-be39-0b471ec9021c","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a17fb590-23c3-4fde-adef-80d178ed1364","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34422","PortSpecifier":{"PortValue":34422}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052965,"nanos":364387846},"http":{"id":"a17fb590-23c3-4fde-adef-80d178ed1364","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/sub-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a17fb590-23c3-4fde-adef-80d178ed1364","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55572","PortSpecifier":{"PortValue":55572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b12fd18f-2be8-4165-af57-be8455655d0a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55572","PortSpecifier":{"PortValue":55572}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052965,"nanos":410859675},"http":{"id":"b12fd18f-2be8-4165-af57-be8455655d0a","method":"GET","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1J0NsbpcEIH5HW9Yr_hEoZi2ob6uU43wRHZr68goWX60TZTIm5wLYskAvXfMq"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1J0NsbpcEIH5HW9Yr_hEoZi2ob6uU43wRHZr68goWX60TZTIm5wLYskAvXfMq\"}"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"1bf7546e-1eaf-4dd4-9341-e02ad6f05c32","keyName":"e2e-sub-iso-ebd3a9","subscription":"e2e-a-only-25f008","tenant":"e2e-shared-a-aa324e","userId":"1bf7546e-1eaf-4dd4-9341-e02ad6f05c32","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/sub-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-25f008"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b12fd18f-2be8-4165-af57-be8455655d0a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"94337b86-d0f3-41a2-9849-a9d77ba80890","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:34424","PortSpecifier":{"PortValue":34424}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052965,"nanos":454142105},"http":{"id":"94337b86-d0f3-41a2-9849-a9d77ba80890","method":"GET","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KVzx412ctTsJW2uR_4CN2JNwZinPHE2JjvuBZv2k3fHwupYv9acg2yCEXVD7"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KVzx412ctTsJW2uR_4CN2JNwZinPHE2JjvuBZv2k3fHwupYv9acg2yCEXVD7\"}"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"fd742478-70b9-4c12-acdf-b448c573836f","keyName":"e2e-sub-iso-53c3b9","subscription":"e2e-b-only-25f008","tenant":"e2e-shared-b-877bd7","userId":"fd742478-70b9-4c12-acdf-b448c573836f","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/sub-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-25f008"}
{"level":"info","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:05Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"94337b86-d0f3-41a2-9849-a9d77ba80890","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38754","PortSpecifier":{"PortValue":38754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de86916e-b5b7-4608-a608-59e92e8544fe","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38754","PortSpecifier":{"PortValue":38754}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052982,"nanos":123907894},"http":{"id":"de86916e-b5b7-4608-a608-59e92e8544fe","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/sub-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de86916e-b5b7-4608-a608-59e92e8544fe","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41024","PortSpecifier":{"PortValue":41024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c48e391-4471-41cd-af6e-84b872e4833d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41024","PortSpecifier":{"PortValue":41024}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052982,"nanos":162364512},"http":{"id":"0c48e391-4471-41cd-af6e-84b872e4833d","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/sub-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c48e391-4471-41cd-af6e-84b872e4833d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38770","PortSpecifier":{"PortValue":38770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bda430d7-48db-4bba-b1a7-042b56a32915","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:38770","PortSpecifier":{"PortValue":38770}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052982,"nanos":198758739},"http":{"id":"bda430d7-48db-4bba-b1a7-042b56a32915","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-oEsZ4ZpLo8bhqS69_HKnBUWYjhOqqIKvzMnXPs5tVxflbkG5rDVBJeZTEz7F"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-oEsZ4ZpLo8bhqS69_HKnBUWYjhOqqIKvzMnXPs5tVxflbkG5rDVBJeZTEz7F\"}"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"e4da25d1-e19c-4db7-b164-7d52f98b745e","keyName":"e2e-sub-iso-7c6d18","subscription":"e2e-shared-sub-3dbf57","tenant":"e2e-shared-a-aa324e","userId":"e4da25d1-e19c-4db7-b164-7d52f98b745e","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/sub-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyName","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3dbf57"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bda430d7-48db-4bba-b1a7-042b56a32915","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79bc48ae-871a-4336-b521-59c5e644f830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41040","PortSpecifier":{"PortValue":41040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"79bc48ae-871a-4336-b521-59c5e644f830","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"79bc48ae-871a-4336-b521-59c5e644f830","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:41040","PortSpecifier":{"PortValue":41040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784052982,"nanos":227997954},"http":{"id":"79bc48ae-871a-4336-b521-59c5e644f830","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1LckTWXFgrEzbDu4j_IULPmjUEaGICClyczQQxYiCQs6dsN7pMrt6KbGYjY2s"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1LckTWXFgrEzbDu4j_IULPmjUEaGICClyczQQxYiCQs6dsN7pMrt6KbGYjY2s\"}"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"19c5326a-ec9e-4e35-8b6b-950b07acdb4d","keyName":"e2e-sub-iso-ab5e04","subscription":"e2e-shared-sub-3dbf57","tenant":"e2e-shared-b-877bd7","userId":"19c5326a-ec9e-4e35-8b6b-950b07acdb4d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"79bc48ae-871a-4336-b521-59c5e644f830","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/sub-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3dbf57"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"79bc48ae-871a-4336-b521-59c5e644f830","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79bc48ae-871a-4336-b521-59c5e644f830","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:16:22Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"79bc48ae-871a-4336-b521-59c5e644f830","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a6b89801784b58dfc5357a99eb9db5bb100a62e6e8e65aea024ac7371989921e"}
{"level":"info","ts":"2026-07-14T18:16:27Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bfd0a42f239df7ff05f9dd3df78de9ff1e4680e86c9a72d6b9aaa2d29decb050"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/807edbfb25ef2ffc26381c6e90bfc80b89497296bd1c1e957f4c278ebbdb17f8"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d260addfba028d3d93f608caf7a6a5467af2059b568853b190c2487e9de78603"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a4c04ea6df8f8565755344adc142a0e9ce2a9df31db4633f588a1b290eb56a10"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c25358786cdad0c4bac5a49cf9b4729059fe415b53c1785cb9e46ea8d29585a"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5864e762a2d1bb92aeb4272458585a91e473ea17dcbcfaa34f4a1e754dc6f123"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/159b573455eac44420dac09f59168f2186d01c1fe090d3559147df78df58d26b"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/59499f4ed500b328afc56583765f1c9d6759394be1be2ff36663fd3212d9a5dd"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/79a0c7f570222af0596db6bac808e517f81107278cc3265577a0890f63e98bd3"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/06c94386a705130491367eb64ceda4f471e4a5879f0aa6ca1ea632d708d6627a"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a47fec8ed44c1cbdcdf2dcbe3bcf9522b4ef314a0a103b857e93aa6a2e027a4d"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/09a182fee9d2a49663687249cb1d3ab50fe1e7239eec8effa353a6f2907d98fe"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9ef08a3a71dc3b2ba3ac14e1babb19f4938a00c73d792e9610efa1b3974a2f14"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc914f7e417da4e716306edca51c458a6074768c28c8da74238f668103c5b823"}
{"level":"info","ts":"2026-07-14T18:16:28Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dee5b4d47424e54aec13ca2b02ddf64d38f948cd4c3921104f832f4235e5885b"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"error","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:43Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:16:44Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"error","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:16:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"error","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:37Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:37Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-14T18:17:38Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"debug","ts":"2026-07-14T18:17:38Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}
{"level":"debug","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:17:39Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49546","PortSpecifier":{"PortValue":49546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49546","PortSpecifier":{"PortValue":49546}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":278389743},"http":{"id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a5d89dba-b542-4f9d-ab1e-ebba34b69c96","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46040","PortSpecifier":{"PortValue":46040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:46040","PortSpecifier":{"PortValue":46040}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":320149322},"http":{"id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b832ce6f-bff6-4a77-9bf6-af8d3ef95e86","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49558","PortSpecifier":{"PortValue":49558}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053061,"nanos":363583369},"http":{"id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:41Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"45a5313b-09f1-422d-b5a9-228f1f604b4b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c47d6368-0504-475a-a871-5b8e97369db1","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:49562","PortSpecifier":{"PortValue":49562}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053062,"nanos":421394401},"http":{"id":"c47d6368-0504-475a-a871-5b8e97369db1","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c47d6368-0504-475a-a871-5b8e97369db1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c47d6368-0504-475a-a871-5b8e97369db1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47d6368-0504-475a-a871-5b8e97369db1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:42Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c47d6368-0504-475a-a871-5b8e97369db1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ae9de893-55eb-42a7-94ce-095fded86816","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:55090","PortSpecifier":{"PortValue":55090}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053063,"nanos":463414727},"http":{"id":"ae9de893-55eb-42a7-94ce-095fded86816","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ie2YBwGKuotrgIQX_dVapxgkTQI6aJbMgmSNV9U88RHajo9lMv8V4v3tuc7u\"}"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","subscription":"e2e-rate-iso-a-a4d500","tenant":"e2e-shared-a-aa324e","userId":"f655f390-8477-4f58-989d-32fcb118b4a2","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a4d500\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ae9de893-55eb-42a7-94ce-095fded86816","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a4d500"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ae9de893-55eb-42a7-94ce-095fded86816","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"f655f390-8477-4f58-989d-32fcb118b4a2","keyName":"e2e-rate-a-a4d500","selected_subscription":"e2e-rate-iso-a-a4d500","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a4d500@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a4d500","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae9de893-55eb-42a7-94ce-095fded86816","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:43Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ae9de893-55eb-42a7-94ce-095fded86816","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"528530f2-8cc9-40ac-939e-892433f4d0e5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32890","PortSpecifier":{"PortValue":32890}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":346909946},"http":{"id":"528530f2-8cc9-40ac-939e-892433f4d0e5","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.37:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"528530f2-8cc9-40ac-939e-892433f4d0e5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43092","PortSpecifier":{"PortValue":43092}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":380446316},"http":{"id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"]}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/d57c83b470ab"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=1231efaf-fd3b-4b96-a8d4-8ddf24f57487"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"8234c919-0d26-4c43-8ab0-28ca411470d8","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.134.0.38:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"455e90de-afab-4104-ac77-63ac9b0bf4f2","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"91361c51-e867-46bd-bf37-09ef0f31025d","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32894","PortSpecifier":{"PortValue":32894}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053076,"nanos":415441427},"http":{"id":"91361c51-e867-46bd-bf37-09ef0f31025d","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"91361c51-e867-46bd-bf37-09ef0f31025d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32906","PortSpecifier":{"PortValue":32906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32906","PortSpecifier":{"PortValue":32906}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053077,"nanos":454836398},"http":{"id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:57Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"7caddf92-a8a6-4f08-a988-9d54ad398ce1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","method":"POST","path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions","host":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:32910","PortSpecifier":{"PortValue":32910}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.37:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053078,"nanos":490310707},"http":{"id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","method":"POST","headers":{":authority":"e2e-shared-a-aa324e.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1eAkr8Smy4p9AdOih_2WXVvG6Ef8ssEqdpPKItvIIaQ3OJ1p4ds37W5alvjaM\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","subscription":"e2e-rate-iso-a-a8e6a0","tenant":"e2e-shared-a-aa324e","userId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\",\"requestedSubscription\":\"e2e-rate-iso-a-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-aa324e.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-a-aa324e/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"719fb13a-cfaf-4035-a534-1700fc53f2f3","keyName":"e2e-rate-a-a8e6a0","selected_subscription":"e2e-rate-iso-a-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-a-aa324e/e2e-rate-iso-a-a8e6a0@ai-tenant-e2e-shared-a-aa324e/rate-test-model-aa324e","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-aa324e","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-a8e6a0","namespace":"ai-tenant-e2e-shared-a-aa324e","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"09d52d17-2ea1-4e14-b0c5-7748d56d0a34","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","method":"POST","path":"/ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7/v1/completions","host":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.17:43108","PortSpecifier":{"PortValue":43108}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.134.0.38:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1784053078,"nanos":525299861},"http":{"id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","method":"POST","headers":{":authority":"e2e-shared-b-877bd7.apps.c5324950-b027-4330-baab-d57c83b470ab.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-ap3j3VSoQ8r6S7z6_Pup7RVPkdXlEYOSuTzJf1zmYBpsNA0o5uDxOhIjP7CO"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-ap3j3VSoQ8r6S7z6_Pup7RVPkdXlEYOSuTzJf1zmYBpsNA0o5uDxOhIjP7CO\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"c833532d-9dcc-4909-84ad-b2a8f2616925","keyName":"e2e-rate-b-a8e6a0","subscription":"e2e-rate-iso-b-a8e6a0","tenant":"e2e-shared-b-877bd7","userId":"c833532d-9dcc-4909-84ad-b2a8f2616925","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\",\"requestedSubscription\":\"e2e-rate-iso-b-a8e6a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-877bd7.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-877bd7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8e6a0","namespace":"ai-tenant-e2e-shared-b-877bd7","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7\":{\"users\":null,\"groups\":[\"system:authenticated\"]},\"publishers/ai-tenant-e2e-shared-b-877bd7/models/facebook/opt-125m\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nheader_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-a8e6a0"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"c833532d-9dcc-4909-84ad-b2a8f2616925","keyName":"e2e-rate-b-a8e6a0","selected_subscription":"e2e-rate-iso-b-a8e6a0","selected_subscription_key":"ai-tenant-e2e-shared-b-877bd7/e2e-rate-iso-b-a8e6a0@ai-tenant-e2e-shared-b-877bd7/rate-test-model-877bd7","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-877bd7","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-a8e6a0","namespace":"ai-tenant-e2e-shared-b-877bd7","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-14T18:17:58Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8a93053d-28f0-4c3b-b65c-df3099ecc563","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-14T18:18:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cd693babd153d5e58b9b5079f34d5c7c86584faf6b7a7ae4299c3d8258e2fc7c"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e88c85c8140d8fe8ec8725956f738ae33f40d5586f32f86b6794ffb61db980f4"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fab717c9a689a89401e3f06dc181ee63b8f6b4bdb5a5211bd5c8ff664bfed881"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2317091a3a0e1f2bc047fe983d2e40e1873596ae4a2b19b628ae5de7c75c9e79"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6ddd931d57e96cf6cd38a0ca9aa440aa92dcd861ebc9556a62c8aaf7144c9e0b"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/040461813dfad883bfedbee7e572727f989f4fb428e8ac4105a547b6cf2f0f53"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4a80159f12cf5512110e1eb3e795a8b4e9679186eb501550e2b771bf2b0f68bf"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/914a55aa94fb7e63692efe7cda6612ce092635b773b9c7d153a22b5bb169df66"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3a549858135956a8bf8d59528fe9512a1508b4be9121177e36ef993cccb8b751"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/32750f921d6796f63306ac62dcc91d7b906eca559dbe5c66697fbceca5e7169e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a26b862339ae1c5ce3e4e93fc32d8643006cda4968ae5f0348fa5488acbbf03"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5d8bd7c0add1c2203b5882512961f22fa46ad0994b85e144233ca6beb0139c"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/39b49af105b70ac1fa9ddb722c757746a24123ca782a4c7ba2b4347e65ca641e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/84a0a74a85a4078fad3a37281513fdcbc41baf4b478ae32dbc4b499ce231419e"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/aae6ec772d0bc734375d95c7cc72cdfc2e3a6f00d7d998c14bf245bcb4ee8881"}
{"level":"info","ts":"2026-07-14T18:18:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d6259852fcf703d53d687cac46fe9a4f9207a2336e9b9c3c09c970ce0fbfe2b6"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d8406409a37fe9a7cc2808262df4a17fec94a4b7cd1daa4647a66e919a08babe"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/484c31b06b3e1804f8d32a48b542ea4dbb8b6649c75b113a21025ab7c1e63d7d"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f258bcfdce5a184eb7298f13d920df71591722c5249aa6d85c8a2c17dfc10287"}
{"level":"info","ts":"2026-07-14T18:18:34Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/8c69d7fce382ab1c9bef7c507b510aede669071db255352178d6468b31efd53a"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6120809b6d3147d97b33de4ad8c468b2a0b0e2948703e69e92122e32373f554c"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/980b595ad90b070f9d92b5b75b2c005c531b5e000d93529794df2691ebe8f65c"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/38cf3f8e21712c37a1b5e8c2dc2aa0956631327f9f73e21164ec87f01a509cba"}
{"level":"info","ts":"2026-07-14T18:19:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d234314725ee2e986af492c7504cf48bc907a191aca1fbe937ee5da17b824831"}