--- Authorino logs from kuadrant-system (label=authorino-resource=authorino) ---
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:21:42Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:21:42Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"info","ts":"2026-07-10T03:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3030d26f887abd62593ec3a73a622cd0abb58d0f39bcf6469785b9e290f1b37e"}
{"level":"info","ts":"2026-07-10T03:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/afdba292986b146ae11733fcf2aff6e3872004b2e2952fd8d5bb8a09b511d853"}
{"level":"info","ts":"2026-07-10T03:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/5eb3f7f277ca5c10a42ba997d2c3fc625ee52554a316d12c2c1d53295eeae2b8"}
{"level":"info","ts":"2026-07-10T03:21:54Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/c87c5568f38640d557da3150afef744a9ead6214d76e91210cc4e089c209b422"}
{"level":"info","ts":"2026-07-10T03:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9da03e4e039415a041c2ce0f77e7bf735371237e97f81b0af9b083af3008f0a3"}
{"level":"info","ts":"2026-07-10T03:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a95b83c54b1316b5c13e9dc3029d90bb84e4543180ac5bf19312c29d0f212154"}
{"level":"info","ts":"2026-07-10T03:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0e511109b43ba6c6bff564bcac8d1eb4ddc7b4d05a53e47ba833603fc44a9fd3"}
{"level":"info","ts":"2026-07-10T03:21:59Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d52759d4675901c3f7a46f68e62d9c70b60a03db06252ff2834c0dec11d52982"}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320"}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:03Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:03Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"}
{"level":"error","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:04Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"}
{"level":"error","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:04Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:10Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:10Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"}
{"level":"info","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:11Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:11Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:23:12Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e"}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:23:12Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55094","PortSpecifier":{"PortValue":55094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d06c00da-6300-463d-aeaf-86a7e324a2be","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55094","PortSpecifier":{"PortValue":55094}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653794,"nanos":460984705},"http":{"id":"d06c00da-6300-463d-aeaf-86a7e324a2be","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d06c00da-6300-463d-aeaf-86a7e324a2be","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03615586-df2e-4a46-aaff-a8e0f572cb61","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53758","PortSpecifier":{"PortValue":53758}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653794,"nanos":523496023},"http":{"id":"03615586-df2e-4a46-aaff-a8e0f572cb61","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03615586-df2e-4a46-aaff-a8e0f572cb61","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55104","PortSpecifier":{"PortValue":55104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","method":"GET","path":"/maas-api/v1/api-keys/d740c6b4-a7f4-4f69-a1dc-7f4749b25c3d","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:55104","PortSpecifier":{"PortValue":55104}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653794,"nanos":591318924},"http":{"id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","method":"GET","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d740c6b4-a7f4-4f69-a1dc-7f4749b25c3d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/d740c6b4-a7f4-4f69-a1dc-7f4749b25c3d",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5484a3a8-0aaf-4091-ab4d-f8f4f6210b22","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","method":"GET","path":"/maas-api/v1/api-keys/47db55ba-7211-4be6-91bf-794106358401","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53760","PortSpecifier":{"PortValue":53760}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653794,"nanos":638643565},"http":{"id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","method":"GET","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47db55ba-7211-4be6-91bf-794106358401",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/47db55ba-7211-4be6-91bf-794106358401",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:14Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"008f4be0-db7f-4df6-9e65-37b3e7d317c3","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34720","PortSpecifier":{"PortValue":34720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34720","PortSpecifier":{"PortValue":34720}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653811,"nanos":762463184},"http":{"id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"69ef8523-923c-439e-92c9-a6dcfe0fbd07","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:57816","PortSpecifier":{"PortValue":57816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e883da5f-e051-4d14-a397-992aeb99eb6a","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:57816","PortSpecifier":{"PortValue":57816}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653811,"nanos":800886899},"http":{"id":"e883da5f-e051-4d14-a397-992aeb99eb6a","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e883da5f-e051-4d14-a397-992aeb99eb6a","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34732","PortSpecifier":{"PortValue":34732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:34732","PortSpecifier":{"PortValue":34732}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653811,"nanos":837946034},"http":{"id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","method":"GET","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-xkEnSnuAWtSxNzSG_iOJym0diSJzWzYVumZLkdQrgW3OX2kTeMQDMPk07McY"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-xkEnSnuAWtSxNzSG_iOJym0diSJzWzYVumZLkdQrgW3OX2kTeMQDMPk07McY\"}"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"826e82b0-926c-4ece-9608-1fa8688bd27b","keyName":"e2e-auth-iso-a-e2cfb5","subscription":"e2e-auth-iso-aa833d","tenant":"e2e-shared-a-f42020","userId":"826e82b0-926c-4ece-9608-1fa8688bd27b","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-aa833d"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:31Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"f885fa50-589f-4b82-8cab-a2ca97037e7b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43166","PortSpecifier":{"PortValue":43166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:43166","PortSpecifier":{"PortValue":43166}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653828,"nanos":955830211},"http":{"id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"00a3ca10-7329-48b4-9ac1-3abae7c1903d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:48Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35458","PortSpecifier":{"PortValue":35458}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653828,"nanos":998588205},"http":{"id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b21df5e5-5b34-41d9-920d-9724c8ad2f85","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec953e29-8f60-477a-b659-7fa269b8754a","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:35474","PortSpecifier":{"PortValue":35474}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653829,"nanos":43345594},"http":{"id":"ec953e29-8f60-477a-b659-7fa269b8754a","method":"GET","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1KLkpWy4odymOR900_ZLVBHNzmQjkJ4sKl81afTaWeVDIX1bdwRfns2i8xG6O"}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1KLkpWy4odymOR900_ZLVBHNzmQjkJ4sKl81afTaWeVDIX1bdwRfns2i8xG6O\"}"}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"reason":"key not found","tenant":"","valid":false}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","input":{"auth":{"identity":"Bearer **** not found","tenant":"","valid":false}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access denied","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"reason":"Unauthorized"}
{"level":"info","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized"}}
{"level":"debug","ts":"2026-07-10T03:23:49Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec953e29-8f60-477a-b659-7fa269b8754a","authorized":false,"response":"PERMISSION_DENIED","object":{"code":7,"status":403,"message":"Unauthorized","headers":[{"content-type":"text/plain"},{"x-ext-auth-reason":""}]}}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58414","PortSpecifier":{"PortValue":58414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58414","PortSpecifier":{"PortValue":58414}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653846,"nanos":133717479},"http":{"id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c7a956b7-63e2-494d-90f9-5ea9e6d48877","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38934","PortSpecifier":{"PortValue":38934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0efe470-a8f2-4981-9e3b-9721d001a015","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38934","PortSpecifier":{"PortValue":38934}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653846,"nanos":172736067},"http":{"id":"a0efe470-a8f2-4981-9e3b-9721d001a015","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0efe470-a8f2-4981-9e3b-9721d001a015","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58430","PortSpecifier":{"PortValue":58430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58430","PortSpecifier":{"PortValue":58430}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653846,"nanos":211495832},"http":{"id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b32d4e7a-95fa-4959-9c1f-5ed9d416c35d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38942","PortSpecifier":{"PortValue":38942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","method":"POST","path":"/maas-api/v1/api-keys/search","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38942","PortSpecifier":{"PortValue":38942}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653846,"nanos":249844550},"http":{"id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys/search",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2b562112-20b1-49f0-bab0-7a40fcad3f1d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42322","PortSpecifier":{"PortValue":42322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42322","PortSpecifier":{"PortValue":42322}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653861,"nanos":246091145},"http":{"id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5ff435fd-f57e-41ea-9869-38f07b86eb76","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53318","PortSpecifier":{"PortValue":53318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53318","PortSpecifier":{"PortValue":53318}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653861,"nanos":284175076},"http":{"id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c02a9cb4-74c5-40c9-97fd-f87b2237c71b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"6711eead-26b7-4cae-9c8e-a95e960386a1","method":"GET","path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:53334","PortSpecifier":{"PortValue":53334}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653861,"nanos":321875751},"http":{"id":"6711eead-26b7-4cae-9c8e-a95e960386a1","method":"GET","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"6711eead-26b7-4cae-9c8e-a95e960386a1","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2562be92-5808-4385-875d-9716d978cba0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42336","PortSpecifier":{"PortValue":42336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"2562be92-5808-4385-875d-9716d978cba0","method":"GET","path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"2562be92-5808-4385-875d-9716d978cba0","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:42336","PortSpecifier":{"PortValue":42336}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653861,"nanos":355149512},"http":{"id":"2562be92-5808-4385-875d-9716d978cba0","method":"GET","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"2562be92-5808-4385-875d-9716d978cba0","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"2562be92-5808-4385-875d-9716d978cba0","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/api-keys/380fbc0b-cfae-42b4-b956-c9302fbf9a63",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"2562be92-5808-4385-875d-9716d978cba0","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2562be92-5808-4385-875d-9716d978cba0","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:21Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"2562be92-5808-4385-875d-9716d978cba0","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38486","PortSpecifier":{"PortValue":38486}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653880,"nanos":629950569},"http":{"id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"ec649085-ad44-4c96-9b1b-adfc71d7cc1b","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0d95624-0178-49f6-a772-08ca6653702d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56492","PortSpecifier":{"PortValue":56492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a0d95624-0178-49f6-a772-08ca6653702d","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a0d95624-0178-49f6-a772-08ca6653702d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:56492","PortSpecifier":{"PortValue":56492}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653880,"nanos":669624658},"http":{"id":"a0d95624-0178-49f6-a772-08ca6653702d","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"a0d95624-0178-49f6-a772-08ca6653702d","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a0d95624-0178-49f6-a772-08ca6653702d","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/auth-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a0d95624-0178-49f6-a772-08ca6653702d","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0d95624-0178-49f6-a772-08ca6653702d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a0d95624-0178-49f6-a772-08ca6653702d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b196021f-b733-4684-ae3b-fbe686fe772d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:38496","PortSpecifier":{"PortValue":38496}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653880,"nanos":707096374},"http":{"id":"b196021f-b733-4684-ae3b-fbe686fe772d","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-1CdGxRp95uwF9DGS0_rA47AcE3Dfq2hELEqHNbwlJlumsROpUywmJu1J6tFd0"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-1CdGxRp95uwF9DGS0_rA47AcE3Dfq2hELEqHNbwlJlumsROpUywmJu1J6tFd0\"}"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"02c10cd4-eca9-4d25-ab9d-89ee07069432","keyName":"e2e-auth-iso-a-a68edd","subscription":"e2e-auth-iso-1da3c9","tenant":"e2e-shared-a-f42020","userId":"02c10cd4-eca9-4d25-ab9d-89ee07069432","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/auth-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-auth-iso-1da3c9"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:24:40Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b196021f-b733-4684-ae3b-fbe686fe772d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4169235f5c165b4604bd31c6c6bcc3f39009f994a060286493ae87d16cebc933"}
{"level":"info","ts":"2026-07-10T03:24:46Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/cc9a994820572edf3439d6342f6b484d8e5526e9b36c945981582b624bf4ab1c"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ec79df522f90c652d8935e7cb2a6be6c330cb6f6b59cf49a0812189a11b6dbf0"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ca344565918625e58f86271b4638d1b406e06e959202cac687c43057a9722888"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7e38926a329cbd35eeba4647a422c20d85556ccc6ed55e744353bfb765cb5b75"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/692636db9bde5a941825231fd82651fa975d5c9514609ee1bfcf8bf74897937c"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b165de86a45f1f175d3e1d712501d62a643142f6f52ae53429f0e0b4697678fb"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/039cd48387fcd2680b44cd738e8f77ca2b8e83a5cd8e12173455333ba5179629"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/925c64bd3a260ab197ecdce2c552164119dcbb1045a064a7b58f8afdf41f374f"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b52d968c43b6d4124d6b0a7666de82f1b234d2ab2c5a2035f41642410aa915af"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6a3cbe4c79b94167579b9c1ac16867956ac5ccec964afdf8ba2696a7f7a564bd"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/678228298809a39d16c4711fe0f49a5bcbea5ed8c8dbb5284543c8e3e3d040e7"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b27ec7b3cecb2ddd779e12b92f9f0206958c674305189176ac7f606f9308ac7a"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/212d7b4d312d48313ddf948eecf1f5d3e9ea89cc6364f9be10336ef508ccc320"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/3d512e5565cad224bd6b4d673b9d9211f3fdafb2e38ad1f68de782db8cb1ec94"}
{"level":"info","ts":"2026-07-10T03:24:47Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ecdd466b30a38b502e3bd781afa010ad4e62d745e378d55d4e16aacf7dcda67e"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:05Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:05Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"error","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:06Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:06Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:33Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:33Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"info","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:51Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:51Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:25:52Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"debug","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:25:52Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"}
{"level":"info","ts":"2026-07-10T03:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"}
{"level":"info","ts":"2026-07-10T03:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"}
{"level":"info","ts":"2026-07-10T03:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:25:53Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50014","PortSpecifier":{"PortValue":50014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"d1690a23-dfab-4b19-82d0-93451ae593c5","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50014","PortSpecifier":{"PortValue":50014}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653956,"nanos":652596979},"http":{"id":"d1690a23-dfab-4b19-82d0-93451ae593c5","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/sub-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"d1690a23-dfab-4b19-82d0-93451ae593c5","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58710","PortSpecifier":{"PortValue":58710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58710","PortSpecifier":{"PortValue":58710}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653956,"nanos":692505188},"http":{"id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/sub-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"03ce47e7-23dc-4960-b4b1-f9b7f50661f8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50030","PortSpecifier":{"PortValue":50030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:50030","PortSpecifier":{"PortValue":50030}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653956,"nanos":732228715},"http":{"id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","method":"GET","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-p04agu68JhTGpMxT_pJOj633YaRKg9PDy2p9s2VXzmzzg9Yb1iBiQDPXbP4Y"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-p04agu68JhTGpMxT_pJOj633YaRKg9PDy2p9s2VXzmzzg9Yb1iBiQDPXbP4Y\"}"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"984b8f5b-cae0-4819-b809-73c8edcf10a1","keyName":"e2e-sub-iso-7f9d52","subscription":"e2e-a-only-506d62","tenant":"e2e-shared-a-f42020","userId":"984b8f5b-cae0-4819-b809-73c8edcf10a1","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/sub-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-a-only-506d62"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"b0bdd8c8-e810-4cd8-8f42-517b88cc1b78","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719546ed-4d39-48cd-805e-18c37480882d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58712","PortSpecifier":{"PortValue":58712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"719546ed-4d39-48cd-805e-18c37480882d","method":"GET","path":"/maas-api/v1/subscriptions","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"719546ed-4d39-48cd-805e-18c37480882d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:58712","PortSpecifier":{"PortValue":58712}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653956,"nanos":773637170},"http":{"id":"719546ed-4d39-48cd-805e-18c37480882d","method":"GET","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"GET",":path":"/maas-api/v1/subscriptions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-GYYTk3WSECu8U0Xs_MEzywqmrsvrwknsJxFmphgCKwF2ay6a3bgHzwmCyPqA"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-GYYTk3WSECu8U0Xs_MEzywqmrsvrwknsJxFmphgCKwF2ay6a3bgHzwmCyPqA\"}"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"6ae32bc2-67aa-48f6-8b22-c95e40dcb072","keyName":"e2e-sub-iso-a4e14c","subscription":"e2e-b-only-506d62","tenant":"e2e-shared-b-45a5a5","userId":"6ae32bc2-67aa-48f6-8b22-c95e40dcb072","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"719546ed-4d39-48cd-805e-18c37480882d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/sub-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-b-only-506d62"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"719546ed-4d39-48cd-805e-18c37480882d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719546ed-4d39-48cd-805e-18c37480882d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:25:56Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"719546ed-4d39-48cd-805e-18c37480882d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:48636","PortSpecifier":{"PortValue":48636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:48636","PortSpecifier":{"PortValue":48636}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653966,"nanos":775866297},"http":{"id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/sub-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"77986a0a-2ed8-43a7-96f4-70807df6b1f9","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"52aa0966-275b-4d22-a2a8-83c0411bb763","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40784","PortSpecifier":{"PortValue":40784}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653966,"nanos":813647751},"http":{"id":"52aa0966-275b-4d22-a2a8-83c0411bb763","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/sub-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"52aa0966-275b-4d22-a2a8-83c0411bb763","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:48648","PortSpecifier":{"PortValue":48648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:48648","PortSpecifier":{"PortValue":48648}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653966,"nanos":847796838},"http":{"id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-9tbyVcdxgzIB060G_Ce1wSKiG1AVmve1uQbcMB4mvzdkjqtOz98Kl4Tn2zTn"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-9tbyVcdxgzIB060G_Ce1wSKiG1AVmve1uQbcMB4mvzdkjqtOz98Kl4Tn2zTn\"}"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8104d365-8e6d-4ef7-ab2a-a9f25c428d1d","keyName":"e2e-sub-iso-b39bb5","subscription":"e2e-shared-sub-3a3ecd","tenant":"e2e-shared-a-f42020","userId":"8104d365-8e6d-4ef7-ab2a-a9f25c428d1d","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/sub-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"groups","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups_str","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3a3ecd"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"5386d8ef-f352-4be7-93dd-e247a92ddaa8","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","method":"POST","path":"/maas-api/internal/v1/subscriptions/select","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:40794","PortSpecifier":{"PortValue":40794}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783653966,"nanos":876388920},"http":{"id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/internal/v1/subscriptions/select",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-Akxl1QWIj66ueHUC_xK5IPuQrDXnvHWye12y2EJsmKwh5JHsCeBAl8wEdQe0"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-Akxl1QWIj66ueHUC_xK5IPuQrDXnvHWye12y2EJsmKwh5JHsCeBAl8wEdQe0\"}"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"290a7213-21fb-45c6-8099-2d959c1b53cf","keyName":"e2e-sub-iso-54a607","subscription":"e2e-shared-sub-3a3ecd","tenant":"e2e-shared-b-45a5a5","userId":"290a7213-21fb-45c6-8099-2d959c1b53cf","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/sub-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-shared-sub-3a3ecd"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"reason":"no such key: subscription-info"}
{"level":"info","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:26:06Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"a212cc68-81d2-4ec7-bee3-00074fe7054d","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0be5ff8acac8e660e810322daebec2f002ffe1e29a2a14b3a193bde57bd9334f"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0a5e8c81a8104650ce7c63f3ce0051b2e470cba971dcdeda798ecb6edbbc59f9"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/169a0bdfc0890fac9c18bf1f0598d7cf4ce776e2c7d868dea3a4a9aad7ddcef1"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/56f4a74bfab51988b31d5ef95ae70811f19f8c4ce7917d6d61a880ef077fb8cb"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4709e03c937a599a07a65f1adf70233410c5b11445379b581f62f6937695f7c9"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/587acfc27aa4d930ead224b97390c0fe40be03996a0ec45c078d9913838422ec"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/78ff3da63fa2cb0749fa0d4da4f2e0503c819b89dd3c495c3652ed1ec29a40c5"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/e970b4f1d988dc4118dbd68534c9ee192a0aa0199b8bb594df0ae2a1d858b5b4"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/1aba7b0f4de959f4cbf65bcb95081db97db8c4eeb2bdf0842c8eb536bbffbcfe"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/4486bd610136e777ac29957c7a1cd0313e2dbf984ab5145fa55e72efd4564ef8"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/103f4922b8463fd6e4c2a70c09f0c632b6801850f0e59256aea76350ee9f1e7e"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/633c224a39ac6aca86b1e6a1f3414d95503d3c00ae03fc37b3d6f6a8ce84e067"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7c8c3c44814498bb751ed748a306155d93f19aa7075c944aebcc116782957c0d"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f890f4bb77c42766e48a8e69964f281db08888c6ddf01fa554ba81cd38eac228"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/768872f2cdc4b7b0174c2c4f92ec06489e3a891276d402418a99e828a33d4e1a"}
{"level":"info","ts":"2026-07-10T03:26:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d7e877289eb9ffaabd26dca0ce9def40b52d100025751bd76121f987b9baa847"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:31Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:31Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:32Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:26:32Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:56Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:56Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Unknown"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:26:57Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:26:57Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:14Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:14Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsNotLinked","message":"No hosts linked to the resource"},{"type":"Ready","status":"False","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciling"}],"summary":{"ready":false,"hostsReady":[],"numHostsReady":"0/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status updated","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status changed","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"authconfig/status":{"conditions":[{"type":"Available","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"HostsLinked"},{"type":"Ready","status":"True","lastTransitionTime":"2026-07-10T03:27:15Z","reason":"Reconciled"}],"summary":{"ready":true,"hostsReady":["2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"],"numHostsReady":"1/1","numIdentitySources":2,"numMetadataSources":2,"numAuthorizationPolicies":4,"numResponseItems":6,"festivalWristbandEnabled":false}}}
{"level":"error","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"failed to update the resource","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"},"error":"Operation cannot be fulfilled on authconfigs.authorino.kuadrant.io \"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923\": the object has been modified; please apply your changes to the latest version and try again","stacktrace":"github.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).updateAuthConfigStatus\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:162\ngithub.com/kuadrant/authorino/controllers.(*AuthConfigStatusUpdater).Reconcile\n\t/usr/src/authorino/controllers/auth_config_status_updater.go:81\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Reconcile\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:119\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).reconcileHandler\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:316\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).processNextWorkItem\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:266\nsigs.k8s.io/controller-runtime/pkg/internal/controller.(*Controller).Start.func2.2\n\t/opt/app-root/src/go/pkg/mod/sigs.k8s.io/controller-runtime@v0.16.3/pkg/internal/controller/controller.go:227"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad","namespace":"kuadrant-system"}}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"debug","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig.statusupdater","msg":"resource status did not change","authconfig":{"name":"b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a","namespace":"kuadrant-system"}}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:27:15Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource reconciled","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e16699a3-efcb-461b-bab9-afc356af6e72","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46644","PortSpecifier":{"PortValue":46644}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":680924031},"http":{"id":"e16699a3-efcb-461b-bab9-afc356af6e72","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e16699a3-efcb-461b-bab9-afc356af6e72","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d20c996-a60d-4185-951f-2106d66dd055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36004","PortSpecifier":{"PortValue":36004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0d20c996-a60d-4185-951f-2106d66dd055","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0d20c996-a60d-4185-951f-2106d66dd055","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:36004","PortSpecifier":{"PortValue":36004}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":723088944},"http":{"id":"0d20c996-a60d-4185-951f-2106d66dd055","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"0d20c996-a60d-4185-951f-2106d66dd055","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0d20c996-a60d-4185-951f-2106d66dd055","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0d20c996-a60d-4185-951f-2106d66dd055","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0d20c996-a60d-4185-951f-2106d66dd055","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46652","PortSpecifier":{"PortValue":46652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46652","PortSpecifier":{"PortValue":46652}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654037,"nanos":764702460},"http":{"id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:17Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"0c8408b1-e8a1-49c1-bee7-a3586f76e464","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46666","PortSpecifier":{"PortValue":46666}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654038,"nanos":825784875},"http":{"id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:18Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"c0b943ca-e0f9-423c-8ab0-8039a9e2eb50","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:46682","PortSpecifier":{"PortValue":46682}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654039,"nanos":866794561},"http":{"id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-11co5DjjXTMYOKRYc_QFhSwUzjvEBBpvPwle12rpvYSckoHyqGdINwzJLBXG4\"}"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","subscription":"e2e-rate-iso-a-251243","tenant":"e2e-shared-a-f42020","userId":"3519a774-17c9-418c-a6fe-3b5448a40a89","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-251243\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-251243"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"3519a774-17c9-418c-a6fe-3b5448a40a89","keyName":"e2e-rate-a-251243","selected_subscription":"e2e-rate-iso-a-251243","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-251243@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-251243","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:19Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"01e23e9c-a145-44ef-9b60-6f76e1ff9d9f","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"de233070-7b12-4842-8cd9-b4e7f9176bed","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52258","PortSpecifier":{"PortValue":52258}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":798994473},"http":{"id":"de233070-7b12-4842-8cd9-b4e7f9176bed","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.45:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"de233070-7b12-4842-8cd9-b4e7f9176bed","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"e4b7153c-84fe-4406-b16a-e4df2f150843","method":"POST","path":"/maas-api/v1/api-keys","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37364","PortSpecifier":{"PortValue":37364}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":840671120},"http":{"id":"e4b7153c-84fe-4406-b16a-e4df2f150843","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity.kubernetesauth","msg":"calling kubernetes token review api","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","tokenreview":{"name":""}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"openshift-identities","Priority":2,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":null,"OAuth2":null,"JWTAuthentication":null,"MTLS":null,"HMAC":null,"APIKey":null,"KubernetesAuth":{"AuthCredentials":{"KeySelector":"Bearer","In":"authorization_header"}},"Plain":null,"Noop":null,"ExtendedProperties":[]},"object":{"authenticated":true,"user":{"username":"system:serviceaccount:default:tester-regular-user","uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]}},"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"]}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","input":{"auth":{"identity":{"audiences":["https://prod-eaas-bucket.s3.us-east-1.amazonaws.com/18837a1fa598"],"authenticated":true,"user":{"extra":{"authentication.kubernetes.io/credential-id":["JTI=cc220e24-8bb0-46b4-a2a0-974e90ea8580"]},"groups":["system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"uid":"7060cf3f-80ee-44f8-b39c-294202ea9bcf","username":"system:serviceaccount:default:tester-regular-user"}}},"context":{"context_extensions":{"host":"2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"},"destination":{"address":{"Address":{"SocketAddress":{"PortSpecifier":{"PortValue":443},"address":"10.133.0.46:443"}}}},"metadata_context":{},"request":{"http":{"headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/maas-api/v1/api-keys",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"cannot build dynamic response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"keyName","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"userid","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"groups","Value":{}},{"Name":"keyId","Value":{}}]},"Plain":null},"reason":"no such key: metadata"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"X-MaaS-Group-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","config":{"Name":"X-MaaS-Username-Token","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"e4b7153c-84fe-4406-b16a-e4df2f150843","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"bac6eeac-9f84-4090-9679-dec988d44dae","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52266","PortSpecifier":{"PortValue":52266}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654052,"nanos":884756076},"http":{"id":"bac6eeac-9f84-4090-9679-dec988d44dae","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:32Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"bac6eeac-9f84-4090-9679-dec988d44dae","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"67a81000-8b59-451b-b928-1bafdbed54f7","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52282","PortSpecifier":{"PortValue":52282}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654053,"nanos":948512409},"http":{"id":"67a81000-8b59-451b-b928-1bafdbed54f7","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:33Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"67a81000-8b59-451b-b928-1bafdbed54f7","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","method":"POST","path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions","host":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:52292","PortSpecifier":{"PortValue":52292}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.45:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654054,"nanos":987962691},"http":{"id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","method":"POST","headers":{":authority":"e2e-shared-a-f42020.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-15yWav6fUr13UlxUZ_aeaDDYJ17nesd8vj9747VkZnM5C9tl49gOBS3saIKOa\"}"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","subscription":"e2e-rate-iso-a-0a27a0","tenant":"e2e-shared-a-f42020","userId":"8a09caa3-839d-445a-b432-0954d508e880","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\",\"requestedSubscription\":\"e2e-rate-iso-a-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-a-f42020.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-a-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"groups","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"keyName","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"selected_subscription","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"keyId","Value":{}},{"Name":"userid","Value":{}},{"Name":"selected_subscription_key","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"8a09caa3-839d-445a-b432-0954d508e880","keyName":"e2e-rate-a-0a27a0","selected_subscription":"e2e-rate-iso-a-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-a-f42020/e2e-rate-iso-a-0a27a0@ai-tenant-e2e-shared-a-f42020/rate-test-model-f42020","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-f42020","source":"internal","token_rate_limits":[{"limit":3,"window":"1m"}]}],"name":"e2e-rate-iso-a-0a27a0","namespace":"ai-tenant-e2e-shared-a-f42020","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:34Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"257b6981-b56c-4ff4-85fc-704e4e2315dd","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37374","PortSpecifier":{"PortValue":37374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"http":{"id":"8c4753d5-fa91-4f83-9d15-73b727491f15","method":"POST","path":"/ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5/v1/completions","host":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com","scheme":"https"}}}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"incoming authorization request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","object":{"source":{"address":{"Address":{"SocketAddress":{"address":"10.132.0.6:37374","PortSpecifier":{"PortValue":37374}}}}},"destination":{"address":{"Address":{"SocketAddress":{"address":"10.133.0.46:443","PortSpecifier":{"PortValue":443}}}}},"request":{"time":{"seconds":1783654055,"nanos":26936450},"http":{"id":"8c4753d5-fa91-4f83-9d15-73b727491f15","method":"POST","headers":{":authority":"e2e-shared-b-45a5a5.apps.7fdb8a0a-6334-470f-8b0e-18837a1fa598.prod.konfluxeaas.com",":method":"POST",":path":"/ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5/v1/completions",":scheme":"https","accept":"*/*","accept-encoding":"gzip, deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.identity","msg":"identity validated","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"api-keys","Priority":0,"Conditions":{"Left":{"Selector":"request.headers.authorization","Operator":5,"Value":"^Bearer **** sk-oai-FQ2WVq8K9TxKBovH_RcaIMuPIifqjfZue1ykYzdaqOXk8kJK1Iiuva0nfw11"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":"apiKeyValidation","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","headers":{"Content-Type":["application/json"]},"body":"{\"key\":\"sk-oai-FQ2WVq8K9TxKBovH_RcaIMuPIifqjfZue1ykYzdaqOXk8kJK1Iiuva0nfw11\"}"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"apiKeyValidation","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/api-keys/validate","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"keyId":"177f5935-3623-4ecb-91fa-61aa462d0bee","keyName":"e2e-rate-b-0a27a0","subscription":"e2e-rate-iso-b-0a27a0","tenant":"e2e-shared-b-45a5a5","userId":"177f5935-3623-4ecb-91fa-61aa462d0bee","username":"system:serviceaccount:default:tester-regular-user","valid":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata.http","msg":"sending request","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":"subscription-info","method":"POST","url":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","headers":{"Content-Type":["application/json"]},"body":"{\"groups\":[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"],\"requestedModel\":\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\",\"requestedSubscription\":\"e2e-rate-iso-b-0a27a0\",\"username\":\"system:serviceaccount:default:tester-regular-user\"}"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.metadata","msg":"fetched auth metadata","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"subscription-info","Priority":1,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"UserInfo":null,"UMA":null,"GenericHTTP":{"Endpoint":"https://maas-api-e2e-shared-b-45a5a5.odh-ai-gateway-infra.svc.cluster.local:8443/internal/v1/subscriptions/select","DynamicEndpoint":null,"Method":"POST","Body":{},"Parameters":[],"Headers":[],"ContentType":"application/json","SharedSecret":"","OAuth2":null,"OAuth2TokenForceFetch":false,"AuthCredentials":null}},"object":{"modelRefs":[{"name":"rate-test-model-45a5a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a27a0","namespace":"ai-tenant-e2e-shared-b-45a5a5","phase":"Active","ready":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"evaluating for input","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","input":{"auth":{"identity":"Bearer **** deflate","authorization":"Bearer **** deflate","authorization":"Bearer ****
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"tenant-gateway-isolation","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":null,"OPA":{"Rego":"# Tenant hostname isolation stub.\n# Replace with a real maas-api call to validate that the API key's tenant\n# matches the gateway hostname (prevents Coke key on Pepsi gateway).\nallow { true }","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"auth-valid","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n  object.get(input.auth.metadata, \"apiKeyValidation\", {})\n  input.auth.metadata.apiKeyValidation.valid == true\n}\nallow {\n  not input.auth.metadata.apiKeyValidation\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"subscription-valid","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Metrics":false,"Cache":{},"OPA":{"Rego":"allow {\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"name\", \"\") != \"\"\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"error\", \"\") == \"\"\n\tphase := object.get(input.auth.metadata[\"subscription-info\"], \"phase\", \"\")\n\tany([phase == \"Active\", phase == \"Degraded\"])\n\tobject.get(input.auth.metadata[\"subscription-info\"], \"deletionTimestamp\", \"\") == \"\"\n}","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.authorization","msg":"access granted","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"require-group-membership","Priority":0,"Conditions":{"Left":null,"Right":null},"Metrics":false,"Cache":{},"OPA":{"Rego":"\nmodel_access := {\"ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5\":{\"users\":null,\"groups\":[\"system:authenticated\"]}}\n\nrequest_path := object.get(input.context.request.http, \"path\", \"\")\nrequest_headers := object.get(input.context.request.http, \"headers\", {})\n\npath_parts := [p | p := split(request_path, \"/\")[_]; p != \"\"]\n\npath_model_identity := sprintf(\"%s/%s\", [path_parts[0], path_parts[1]]) {\n\tcount(path_parts) >= 2\n\tpath_parts[0] != \"v1\"\n\tpath_parts[0] != \"maas-api\"\n}\n\nraw_header_model_identity := object.get(request_headers, \"x-gateway-model-name\", \"\")\n\nheader_model_identity := sprintf(\"%s/%s\", [split(raw_header_model_identity, \"/\")[1], split(raw_header_model_identity, \"/\")[3]]) {\n\tstartswith(raw_header_model_identity, \"publishers/\")\n} else := raw_header_model_identity\n\nmodel_identity := path_model_identity {\n\tpath_model_identity != \"\"\n} else := header_model_identity {\n\theader_model_identity != \"\"\n} else := \"\"\n\nusername := input.auth.metadata.apiKeyValidation.username\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.username != \"\" }\nelse := input.auth.identity.preferred_username\n\t{ object.get(input.auth, \"identity\", {}).preferred_username != \"\" }\nelse := input.auth.identity.sub\n\t{ object.get(input.auth, \"identity\", {}).sub != \"\" }\nelse := input.auth.identity.user.username\n\t{ object.get(input.auth, \"identity\", {}).user.username != \"\" }\nelse := \"\"\n\ngroups := input.auth.metadata.apiKeyValidation.groups\n\t{ object.get(input.auth, \"metadata\", {}).apiKeyValidation.groups != [] }\nelse := input.auth.identity.groups\n\t{ object.get(input.auth, \"identity\", {}).groups != [] }\nelse := input.auth.identity.user.groups\n\t{ object.get(input.auth, \"identity\", {}).user.groups != [] }\nelse := []\n\nmodel_rules := object.get(model_access, model_identity, null)\n\n# Management endpoints (e.g. /v1/models, /maas-api/v1/api-keys) carry no model context.\n# Allow them here; subscription and rate-limit checks are gated by model-route conditions.\nallow {\n\tmodel_identity == \"\"\n}\n\n# Inference path: deny by default when no MaaSAuthPolicy covers this model.\n# Allow only when the caller's username or a group is explicitly listed.\nallow {\n\tmodel_rules != null\n\tmodel_rules.users[_] == username\n}\n\nallow {\n\tmodel_rules != null\n\tg := groups[_]\n\tmodel_rules.groups[_] == g\n}\n","ExternalSource":null,"AllValues":false},"JSON":null,"KubernetesAuthz":null,"Authzed":null},"object":{"allow":true}}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Username","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Username","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{"Static":null,"Pattern":"auth.metadata.apiKeyValidation.username"}}},"object":"system:serviceaccount:default:tester-regular-user"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Group","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Group","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"[\"system:authenticated\",\"system:serviceaccounts\",\"system:serviceaccounts:default\",\"system:authenticated\"]"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"X-MaaS-Subscription","Priority":0,"Conditions":{"Left":{},"Right":{"Left":null,"Right":null}},"Wrapper":"httpHeader","WrapperKey":"X-MaaS-Subscription","Metrics":false,"Cache":null,"Wristband":null,"DynamicJSON":null,"Plain":{"Value":{}}},"object":"e2e-rate-iso-b-0a27a0"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth.authpipeline.response","msg":"dynamic response built","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","config":{"Name":"identity","Priority":0,"Conditions":{"Left":null,"Right":null},"Wrapper":"envoyDynamicMetadata","WrapperKey":"identity","Metrics":true,"Cache":null,"Wristband":null,"DynamicJSON":{"Properties":[{"Name":"selected_subscription","Value":{}},{"Name":"userid","Value":{}},{"Name":"groups_str","Value":{}},{"Name":"subscription_error","Value":{}},{"Name":"subscription_error_message","Value":{}},{"Name":"keyId","Value":{}},{"Name":"subscription_info","Value":{}},{"Name":"groups","Value":{}},{"Name":"selected_subscription_key","Value":{}},{"Name":"keyName","Value":{}}]},"Plain":null},"object":{"groups":["system:authenticated","system:serviceaccounts","system:serviceaccounts:default","system:authenticated"],"groups_str":"system:authenticated,system:serviceaccounts,system:serviceaccounts:default,system:authenticated","keyId":"177f5935-3623-4ecb-91fa-61aa462d0bee","keyName":"e2e-rate-b-0a27a0","selected_subscription":"e2e-rate-iso-b-0a27a0","selected_subscription_key":"ai-tenant-e2e-shared-b-45a5a5/e2e-rate-iso-b-0a27a0@ai-tenant-e2e-shared-b-45a5a5/rate-test-model-45a5a5","subscription_error":"","subscription_error_message":"","subscription_info":{"modelRefs":[{"name":"rate-test-model-45a5a5","source":"internal","token_rate_limits":[{"limit":100,"window":"1m"}]}],"name":"e2e-rate-iso-b-0a27a0","namespace":"ai-tenant-e2e-shared-b-45a5a5","phase":"Active","ready":true},"userid":"system:serviceaccount:default:tester-regular-user"}}
{"level":"info","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","authorized":true,"response":"OK"}
{"level":"debug","ts":"2026-07-10T03:27:35Z","logger":"authorino.service.auth","msg":"outgoing authorization response","request id":"8c4753d5-fa91-4f83-9d15-73b727491f15","authorized":true,"response":"OK"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2e5e02b37f52b1f125cee3972b96e32b459cc0c60c83a753b2482afadbe87878"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fa93a34ab7976f7053416672e0f89820d415e559b68151efb22c591f82433881"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b5f04e115957eb76d8d82da0a2be97c16ed43227295c37427058547577f076ad"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/bc23778bb2d238c7ad6d84e2e915ac6f86b52a03cf8dc805144c3f674784b15d"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/db012f7f1967fbf26e089c25220cb3b9a19a3be3e8a7da256776d725547a9b4b"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/664b04ac53898817ff068760b763d23f198080e2a8129088e737733f580e7459"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ba7c017174122a8722b2148b245df7edc16b0fb85a3b9611ca43db3e4178100c"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/a3bc6021e75b18558f519a2c1ad03cb9fc8547312db70d4f783bdd0a81caba29"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2268812468419a08d5d048cf9a273c113f7c36c8b2d8046c4e92c18eb31fe923"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/dfbf3bbe827885a067265cd38d23cf1dbaaddcbd0d8a5aed361defe1f239d060"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d5cd1ee7316ced6a38e2504303c249f21f2928e0dfcbba60e6df8b60d5e4a51d"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/ebb116be10c735686f46082e6b6eb203555fc796e9e5a65a7520ffab4cc4e596"}
{"level":"info","ts":"2026-07-10T03:27:43Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/9afea55458a8ca664fce682f595048e2f8209288be9f39b109da69ecdee05355"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f4034c0a20d4abd33dcdd15eae6c8d27a1c455015451d31854bcb7fc4896e507"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/0b45ba79c70c0c81c9e9bf63023fc1609c1e45add89c92e84e12ed618cca6e49"}
{"level":"info","ts":"2026-07-10T03:27:44Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/fd23616266aef81935dda962afbaac2821b6fb84e7c563b82e91c56601044897"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/f5b51e3703efa33e8944d23b246ee10be054d728f7bd6331ef58f8d7d349e772"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/66361aef198ca7ec035ee250a80cd5b3d656a525bf1af65d51e66bf5d377bda2"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/672c2b193a9d94d5b4a7b00c02d21c1a97e0ad5511fa2a16f6340928ee2a6219"}
{"level":"info","ts":"2026-07-10T03:28:00Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/6be8364ca52da7f8f401adbd17a3712df7be3631a6495a73dbd50005f53d3d67"}
{"level":"info","ts":"2026-07-10T03:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/d0e93a2fe12d5e0a4cf6837529fed7b8fd62891636710216fefe2010ef3d3fed"}
{"level":"info","ts":"2026-07-10T03:28:07Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/2523c3845a3622eb2e60ea1173fda10e8d7a5608e51b417112d53d401469fe50"}
{"level":"info","ts":"2026-07-10T03:28:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/7874103bd7822ff1e451813c13fb7e6e0d39a40ac2c67b618827a448ce31249b"}
{"level":"info","ts":"2026-07-10T03:28:08Z","logger":"authorino.controller-runtime.manager.controller.authconfig","msg":"resource de-indexed","authconfig":"kuadrant-system/b1738e6783ce4f57e9504a5299a7378d01e6a2115cc26736f7f18674beedae7a"}